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a sfisaT* o time 3 y y « «<os 

flHSt musmmizmt^-m^ yi-y-mm 
a**- £ fc» t^s^riifffg t *s t MiesciMiefi s*i 

tvi £ itfie$ij#nigc7)-gi5i fctt^ssrietfrt s 

«J#ti!#i£ MlBSfl^S t <^ fiilfifc i 0 Eft 

Has*!***-**: t iisfflS'j$ij»tf#^stJMiafrr£ ^ 

i gfiiarca ~> xm^ y^'jmtm^n $ t 

3 y^yvmk^mit'ft o ^immzn i N mianif 
ffi&ts&Efi t , mesmif (dens ftx v i*meft 

i , , : mar « mi Eiimfflft a<D§fi#ims § ti 
t-ttmm&jim. 

[ ttsftiM 3 ] fr i ESfina * fi#*> «jb tt s 

liffiffl3WfflWffl*1i!riE5K*l*ljiflt J: OEffl^S - fc 
&#Sfct-g.W*iI 1 1 tdi. 2IB»cO'If ffiEli**. 
[M*JB4 ] fflBffiWfPffifg^|fflB?^f6]afIt J: 

SrJfcMEfrf £ £ i: fc^i 1"* If m 1 * fctt 
2fE»«fit$ffifl#&. 

[ mm 5 ] ffiB^tt mt^immmmmt^ 

mm afc«2iE»<DflffflE<im 
[It*ii6 ] friEgfi^a^igfiLTA^friEfflS'ifJ 
»fta^^r6iiifltj; OiHtf S£fc S^Sfc-f SIS 

1 * fctt 2 fE»Off ISEft^o 
[ if *il 7 ] K^Eff SixfcBf titz a yf yy 

itig^SfiLT. m^zzyTyvmtflmtiZ 
T/mzft? ^mmuzh^xm^ yryyfliffcoa 

tt#tMESftsat»L*umiE3 y^y-yni^ 

tz 3 y r y 7 nmcomiRH X tWfcfr -3 SflBSlCtt 



t^li^^Mff-t£^*«ffiifflffil'ff#t|fflEiiffiS 

*mmt& mmmmx'h -> x . 
mBsmaummtim 1 omi^st . 

fffiESfiStah ^JttFftfflftfcJ: "9fufEffiiJ0J«ltiWg£ 
MIEffiiJ0JW«^Efi5fecOgftgaT"|gffl3iJ$iJiPffia 

mttm3c^mn^k. 

mmu^ k iw&Lki-mmmimm. 

o smmmxh -oxmmyfy vmm&nt&x. 

mii^mmmzm l ^ man y^yy^m^mt 
t tzMz&wjmmm t zmzmmmimtitz a y 

iziz\&tstix^mm^mm<7)-mtd±^z 
imt&izitomimmmkmmmtw^t&tt 
mmmmxh^x. 

MiEH'if mmmm-ttm 1 <nmmmk . 
mmsimmkcoMU^mimzi vmsmmmmt: 

cD^tmmmm^tzkmimmfflmzimm 

ftt§B3oEfi#at. 

zm l fc £ fc fc -r ■& timssei. 

[If *JI 9 ] luiEU 2 OEfl^Sii. ttriESfisa^ 
mmhW>Mz-fh fctocon vy F S:ftSEfl UT4»6 
IJIEgfiS* t fS* t TlulEffi'J$iJ»»fg& filE?I*^ 

a«t j: o us** - 1 t«ftfci-*it«5i ittdts 

umm i o ] mm20>mm\i. mmmm 
^mmmmmmizxmm-rtfzmzmti^im 
w&t> mm^comm^-th ?~?y v*mmm 

£ff*iM7 ^7t!i8IE»«'[ffgEff^a„ 

[ff*ii 1 1 ] KfiEss i mimmi. mtmmmz 

^tihimmmxim^m^x o ^mttxmmi 
- k mmkthmim7ittz\±8%mmmw, 

[ tmm 1 2 ] mm 2 «Eft #e»± , mtzstwrn 
*?mLxfrbmmmmmwmh z. k mm 
k -t&wmm 7tfn±8 1 Ettwft mm mm . 
[ff*« 1 3 ] WJSKffltf *ifcfl»fl:s*i3t3 y^y 
vimz&mLx , m^mtc 3 yTyvwmimz 

miaR^Efi^^Jtnyryyffl^a^^^^ 
* t sa t iw<ofli # ^*tf a#MfflflBB * E'lt-r s ie 
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mm. 

mzmmt&fcfrmmmnmzmmt&m 1 mm 

i comimm^mmmtstifc um&mmmm 
mz^m-ftm i vstpmb. . 

mm^immmmummmmtim 2 nmmmm 
iw*#afcia«s *ifca#»j«flH8 1 m§ eh 2 <o§ 

3W. 

mesi 1 offiffi£a*>6Sff3*i& MiEiisiJSMfflfg^ 

£ t «Si tl»i«*il 1 3 efteffl&Xfi 

ISK. 

[ » *jm 1 6 ] trieiiffiigii , %m%it tt:m&.m 

^fcSfvO^ ; t *!|«Sfc-r 1.11*11 1 3 ffittc^iil 

[ii*ii 1 7 ] asa^iB® 1 <vsi®£Xfrt,vm 
[f»f»»jf] 

[0001] 
[00 02] 

[f£*«8ffi] rjWft&tt, 3Ht«£ <cs) fcjfc 
[0003] ¥i?9MtmtoXttXNmi.* fflSBMffi. 

m±mti, Ti-uyimiztmLzim^*>m 



t uts -r <r pcy7f zimxmt-fi z 
t mmt & o , ^« i -5 a-*- fx zmk-th ft£>o 

xtsifttt fe<tT v ^«s*& ^ u jvmskim 

[0005.] £OJ:a*^-f A{CfiV^T*HJffiW^- 
ftU ^)^I^^T^?7^fi<4i\ K 

*»i ss»rt«tfiD Lftn^Ji^'if x.$rtmtfwt 
*v*. mmmmzmLtzimmmtii. mta. ©fso 

[0006] 4ft. %{mmzxx?7>7-)Uh&^& 

[0 0 07] i*it»3H-4fcft, «!*ii&)M^fI^M 
HfctflHtU 9m»LTV^«Bt(Ztt 

x < i wwff s ; t 3&«t- 

[0008] ioi a *RRSSfi*#r{i (SfSSaft 

%\mmzm.<v mxm^-it s <ut ^ 
[0009] mat. ®^<vm%.%immx%-oXi> 

cojnA^tMf lt ^ h tztbT^mzmimmm^ i 
sit =5rv ^ft^ . iKs^aiiait Dji lmi r 

[0010] Ht, ffl8!WRjesWlflMlt*4*i4l7- 

fmummmm m^i^n) mzm^n. *<mm 
mzmmfr^mizmfe%mmmzmt>%<xmt> 

■fe y ^ ^ftfe, -gsj^l* 0 £ LSft L 
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i. 

coon] tcommmmt&tzMz, wsm&a 

gmtzMzii) Mmmm^mxn^^. 

^^fcvmrnzx -ox. ±x<nw&iznLxmi$m 

jgt. mm&£mmmz%w35m®%kt ixmm 
ix^m^t. m^mmmmmmz whiwm 
x ) mmtix \ ^fctbmmxz tc^t^o rnrnm 

4. 

[0012]-^. mg^m&mtomvmmt 
sr. mmim® i m*>?-frt>%immitmix 

^4. iWiSft^a^fPrtl.^tJ:^ »0ftf> 

n*»m o t mmmit t z t * m «- & Jt *>-ca 

*U«r fe-f , fc n 3 PM**** . JEfc* 

A^^Sft^S^J; 3 t»i#mfS£?jdf[«*i LTffJ 

x *>&v ^«Kiffltt«i^ ^ v ^ ran* 4 *. 
4. 

[00 13] 

saai s^ta a . jDA#««jDKff v ^jn a^ tis 
fi-r^# ft ***** l . czmmm ttzcvxn, 

[ 0 0 1 4 ] Jfcfc. ^jDA^5BtmiS»^^*-[6]iIfi 
tTEfit* t LT fcsefifflJ*** tf> i 3 =flrgfl*&£f!f 

6 V m . §fIffK"ii: V v^-C t, 5f ff#^ L T tJ < * 
[0015] #&Bjj{4. ;<oJ; 3&il«tl; 

-T4. 

[00 16] 



%mz%mmmz®^<7)mzii?tsmmmm&kmz 

yfflBBoa-tfcfr 3 sft$tst*t l . irKiifi!fg£S3i 
@Bfi l . m i Bgft s« turns *it v > & wiea-f mm 

msmwikoMiiftMmzxmmi. ms 
immxcomimmmm^mtm^m^tz 
t s #^ftssfi-r s £ t *!tfa t tT4 . 

[ooi7] *&Hjjt £xe&fmwzm.<?) 
mmmmzx . ^smmmjiwssmmmin, 
nmmnmmmt x-oxmmt. z nwmm 
mmm&mzx^fr~>tzk% mmmmmwrnm 
mwmti cox\ w&tima ix 

-K'zmm£vjmizi-&> ttz. mmmmaws 
wmnmmwmt * o mm* t z 1 1> . jbss-ce 
ftts^t fcT**fc«>, saw- 

Jtwimh ^iWi@iit«si$ft-o^fi 

^« t IB t T f±«j&5r}K*iaiMm T«iJ$W'lf )MfI 
L . M <i>^co*'lf -CSf^S iiX v ^t «SS*«TC 

[ 0 0 1 8 ] m L< (4. mKgfii^£*fI#Wj! 

^gfi^a&*fi#*>««t-ts cot. s^ii <o« 
1 1 h t. fflsiMfflfiHRs-aistiHiT 

& . =&^*>f ;i4HWIta Lfc*^«ciS^r A ^^ttT"# 
S. 

iE5R*i6iafi t «t o ggfi-r h fcft tfjiEgfi^M^^o 

W$*Wr<th &$SHffiff-f-i> .1 1 1 i; 0 » S 

fiHaHB*>4>co»Bf t J: 0 tflM9«0««f(aSiHtt*« 

*«» ^ B#p B i^t»+t- scifct±-3Ts fflffism sat 

[ 0 0 2 0 ] * fc N * t<(4. MlBgfiSa^llEt 
fctiO, #t. gftga»^^BftiDtffiW 

comtmmbzz. 

[oo2i]^^, mimmzmzmmmzwmi 
sztim^mizm^zMLZtimnmmx'm 
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mm%* o m^itbxmmmm-i zkizx^xh 

[0022] xmnmstmsmt. mmmtiK 

y^ym<nmmom.mmmzaux. mm 
mmmztitt y^yvmrnm^cotz^zm^n 

ffiiem i <ntmmm^mm^fitz Mmm^mm 

urttk z^mmminmimmzmmzg 

nHt $ tae^s mm b«#s tiEtts frfca^sramHii 

tMzmzikx amtiG£&mtm£imnmm 
wm-t zm2 mitmwfr wmm £ titzmmmmm 
*%m&m2<7)%m®t , mmmmtzmmti 

ff 2: traMEftaffiffl Shifts >r J^yflHBWtW* 

coo23] *^gtit xtin , m&gmmn. ^x 
ngimwizitmnmmmzAmdzx % ««sBiffii 

Z k \z X 0 , apA***«3P t T t ^*coj@S WWfg^ 

i^^ifi t j o len-r s c 1 1 , ^jSTSfit 

ii:^[6]afit"flS«iPtflfi^^fiL, M^*^»WT" 

* * i k #-c# ^ . -t^^ , &%imwimmizmw\ 

[0 0 24] m L<tt, ftiSEmSiifcnvyK&S 

ft lt , Mem i ^iafig»*^Efi£ftSM«i»J 

i t fci "5 , ra*flfflHffB££fl'f S t S 

tthiz. mmmwmzmmmmxz , ;m 
[ o 0 2 5 ] ttz.M 1 1< it. nuMmztitzavy 
% i vmmim&mthz. tizx*). mmmm^ 



t> . mass.? 4 s y?mm i ^iwtigmij-c-i^ 
-ri> £ k t J: o t s a i tr, gusna* ffimwib h 
m^ffitzMtp-f&ZklzXiX. m\<rm,wk 

[ o o 2 6 ] 1 t l < a. smmmtm i <^ie 
mi^zm&ziiimmm&w^mx o iz 

[0028] 

iwmmmmm] jut. *^aH^si»«t^^T 

[0029]^ ffll^^^ffo . l ^ifcliit 
fc-%k'*MLXrJi%.comj ■ iMmZk'ltfi^zm 
a-— ffc n?^ ) /2'itCM3 yj-yy <DWi& i ¥f*I't %> 

mmmxn, ma. ^mum-t-^^cofz^ms: 

[0030] mfe%iMftZcotztb&to\%mzi--r* 
JR. WUf&^*MZ^*lVm^*m. E12C0J; 

)vm)mkxhh, 02fjiS2. ass. *7. 

[003 1 ] JKt, 06t^rf 02tSLfef- 
[0032] *MS^FJfcf|4^^aj*tf-t"X^#Jp 

7Mi, «f|itf, SffCSSSISfflfttt5*tSEMM (En 
titlement Management Message) „ EMM-S (Enti 
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tlement Management Message for S— band) l/ZM 

tzh {mscm rBs^s^wMaRgwian* mm 

W& ARIB STD-B2 5(ttm)j). 

[0033] mmay^yvwm (jjtk mmzayj- 
yvm&ztmt) a, #f-v>"*;M5t^r-5Jt 

3&£T?)JnA# (fltlA#«J5r^S£T<OiS58g<iiS 
=5r*J«ifflffi**jiiW»fll«tDfA. *is. £»J«$g 

IS', 33MfCSJS3Ufflffi{CtJJt*ECM (Entitlement C 
ontrol Message) N ECM-S (Entitlement Contro 
1 Message for S-band) fcSfcS (##XiK r B 
STiW»gRB5ggf!*3$ ARIB S 

TD-B2 5 J . 

[0034] M^x^mm-thimmmmt. mm 
wmrnb^mmmb zmmizmtz ztizx 
o , &w&a*mmt3& o 3t 3 y r y -yft fgwiiii 

[0035] 0.T«H5Sm^iltT, SfflUBrtgp-C- 
KK££ft#ScS:*3W-*ate!S (±CA-F^x7) £PS 

yizmm%imtzfr<om®nm^£tix^&cr>v\H 
r-'ffijstw LT^^^ti^ft 

U »SS*, £S#T'^&v«?y^1«}i£f£j£LT 
T, ;OTybh77t;y?^:. 3f£-fe 7 h h -y 7°*' 

T, ^*fcLT»aS^at*ffljSLTt»J:V>. 
[00 36]$:*$, OT^iJBHfctsvvc, ffirffcSfifc 

[0037] JaTW^MSBJBTIKBBf 

9- (ffimz*y?-m^tm&) ttx^m 
[0038] (mi warn* ) *&mm 1 »»hi 
i>-x"rA.vcDmmmvfo & . >i <o a -5 ^pssgft 

tf SWIf Stents LTiMf! L3r WUf * *v wcsa 

ft «^'A# < *s fc mH£tf&s. t*tf*coBm-? 



[0039] Zcoi. 5 ftRjesea^rATtt, W*. 

^iiT ^ * £T OgflSH - ? 

»K w£#gfi$gIfflJSiJO'?* * -UK MT'B|^~ffc LT 
fflWtl. St. f57-?lKw^Tf'¥*W 
-KchMWftLTSflW-*. asaaVTWtt^ 
*;Mf-K c h ^ffio-r'KfflB|^^:t-Qf^$^TV^ 

*-il£ffioTv^T1iMfM#iy;fc&l> . 
7-?ttt M * £ fc^ o #&TP5] tftfcffi o tffl&<r> 

[ 0 0 4 0 ] 31 1 OUtfe^lI^PS^gfl^X^A 

[004 1] nyr>-yA^.yh(j:[l4t*-rA^-yh 
S!HFs ^ J? ? y7'/UZ tit: ( i»ftStLfc ) SciMn yr 

i> <nx\ z. z Tfin y-r y 7^ ^ - y h x-fo h z t 

y^yvtf}i<n^*)V<n^y^yvfr*fF$%><ryx'fo 
h. ±tz, ^*)v*-mm±mmkoy^yv* 

tetk<vm&T-?x\ *)v*-mmrnztdz 
^*n*-Kchxm^\tztLx^h> 
m.x-^.^fih^x^\m (r-^) \m%&?m& 

[0042] £ iTiJWI>*3i$lJ«A^ .y 

^-■yh^T\ mmffif; y-^mmwft. 

( 1 ) . f-r*/l^f-«ifF ( 2 ) , 

(2) x°m&ztixt5<Q. ***>vmmpt>i-**)v 
*-(2) txcD^miv-fmm^x^titzv- 

wttz*i-i>vx\ zzx-ummm^-y-yh 

^HEdfflO^aHMIP^ v b ) T"J> &Zb 
h^fcW^^l/t^^-rtx^T&l.* 7- 
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t i o T Bf $ iiT V ^ 4 ^ * fflf«T* 4 . f- + * 

^*/l^-£SL/C^4. 
[0 0 4 3] ii-c, f-r+^HKBO^kf-r+A^F 

KS«WHT"^S§ ft 4 fc» , *>v*-0tfa *)&t 
£ X A -Xfcff d j&gi* -> T V ^4 f-v *;U=3f- 

4. ;c0i3fc2fflJMffit4iii»|gBHC 

[0044] *H«ag!lSfc:i3V^ , «M«HJHBIi£* 

tf> 2 a "J & 4 . v ^fc-fr ± «IS«fi $B fc ftMSM'B 
mt Fffi&W -y hJ^-CiMfflSix; t tJEi> 0 liSrV* 

[0045] ittfawm&^&mixtmwm** 
vhiz, ®7 (a) iz^txdzm&nmmmum 
^mmm^^yxhn. mm*?. -?x?-mm 

SfF. Bf^b$tl^^M*^^-oTV^4. <ff«J 

a**? # 4 vx 9 -mmmmzh o . ie l < ii«ft 

[0046] mmimztizmwmm^-y ui, m 
< mmmmmmwwim; v «, h xh o , m i 

( b ) 0 ^Bi^tSKKcSfilia I DjW 

JnSflS **9I*[Sl®fiT"jMft$n4HSWW^ -y h 
(117 (a) #83) kM*4» i^ff^aiDiiUS 

jfrtm-c. v b sa^ts ) 

ftSS^T-M* 4 fc» . ^TX&'ff IST h 4 . 

[0047] f^wst a. m 5 i o k, s«s 

a ID, ^^S^fflfi, 7-?»0»natfn») 

ft gaftspofiisgftss i o o mzh 4 ansa i d t 

I DT**. *+*/l£85rtHSliS^Iiai 

i D&fl-r4Sftsa^sftt"#4f-^^^s-rto 
< i ) tasK?-?* ( i ) <mm-xhh. *mm 

tt££ ^X V - 7 «*f * R£ § tlX v * 4 fc 



* *;l48KrtW8 ) WiESttSllBt 4 fcft^)fflf «T» 
[ 0 0 4 8 ] ft. ft 1 OSQBglBTJi. Ztl^xm 

[ 0 0 4 9 3 »Ct. » 1 W||Mffit<S4BciMgftga 

t>m9^-rmnmmizximmm^ v b%im 
[ o o 5 o ] a i nmmmmmi. ^rAgg i o i $■ 

^•t. ■fey^-A^cO^PffcML^t4;i:T\ ^ 

ftc7)-fe-y>-3y>Wli§ix4 (xf77Si ) . m%ti 

951 0 2{±, 07 (a) CiUcJ:3M»lA-y-7 
hSrgftt/ti:^. ^0'ffHli^iff*^i^^-y htf 

mm^mimn hcoxhizt mm liz h . zti* 

bfr^xf-mmfrzmmtt (xfyrs2, x 
f7rs3) . m$Lti'?x9-mmftf-?x9~& 
mmi 0 3Mmztix^&~?x9~mznmLtz-? 
xf-gmmTxwtnt. QtiLZtiwh* v * a y 

£ifOTLt\ -fey^- / vx5-^3Mft1-4 (Xf77S 
3. Xf77S 10). ttJELfcvx^-Hit^iffT*) 
4k# (xf77S3) . v^HBttWl03*>6 

7/S5) . 

[005 1 ] tR#S<Xfe!SKrtI!«t**<lTV^7-^ 

f^rsiD.iit. 3gg8»fliaK*i#iTv^s 

fig* I D fcgflltM I D^fflAS 1 0 6 fcfcttSflTH 

4^fi^a i d t ^jrt^ l . -a L4Witfa«ffl* i 

0 2S-^LT^y^-^.x5-SrtB7j-t4 (Xf77S 
6. X-r-y 7°S 1 2 ) . -Scl/OvMfcf. SSftfltffiSaE 
» 1 0 7 T-TV^^S^^fiatgll*!^ 1 0 8 fctSlftSfl 
TV^«WS*fflV^T («itf, f-^^^ff$g*4 

Ui, 05 tst-^ffi#^ a %Ty^;i«*CW<oa{ 
Tis?)vm&*miL (^f77S7K tkmmhL 

W-ftOS. -^OgSriMSft^l 0 2^iYLX^y9~^ 
X7-Jg«t"4 (^T77S13)„ 

[0052] mEtfi&miM$i-**j\#mmz$m 
mmm 1 2 1 tsttLfca (xf77S8).t> 

mmmtxmjtt (xf^rs9) . 
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[ 0 0 5 3 ] Z i *C£ttflNHgE8 1 0 7 fcfcttS rV 

a^wwrc^n -y vimzmtma&wc. i . 

7"o >y ? Srr^ t 6 . i i -C5KK 

W&Hf-f -ftfc ia^T-D -y 7 ^ijfttW'n <y ?*>lfr§ft 

scoyo -y ? sssiwrciW'ft; l , wmmgk t m 

W'P -y ^C0B|^^*^»«t^W^ oTSftO 

zmmm k s **<Wn -y 7 SriSKLfcW^t 

[0054] ftlitB^fci: SS^ttEJiiSfatlfi 1 1 1 
(4>>3 ifc, T^7;«£fc{4. MfB^&WM^N 

-y nwritss* Lfc ^r-^^*<?5*#8at*it 
^w.^fLhk^^^y.mmL<mkmi)^ti\ m 

&\ -y yalJ £ft*f £ i fc *WC* £> 

[ 0 0 5 5 ] T2r< . @5&33«* s /h£ < 

?-k ntm*9wsatim?t:*>. ^v*y?mz 

[00561^51 -3tt4MI«»fcffiVvfc*i6Vs S 
»«T»&Lfcfc^4MMiT«IW-*. 

mmz^-v*>7' ixmmm& ix *> , sawss 

tMl-C'* Sit *«l$fflT* * . ffifcT 3c^tt^i8f v ^ 

t o o 5 7 ] j: a ^f'J^^m^comtit-z'mjzx 

;l/#fe£5ItT, ) flftBEUgS (fStfrtPIigKi: fcn 

V\ -ffc^. ^H^imOfP^^-ybtfeOTrV 

[00 58] &£ s 01 O~014fcqrf7O~?-*- 
h »l LX . H 1 Oft3»11£iI#83^ hl&m 

ixttme&w&tmi i nsaii/cmsai^fcfc 

§fc (XfyrS2 1) . ZtlltK/D%mU112X' 

Ti-um^t>T<J?)immz$mLx^ v bra* 



<0rS'**A'T-*C^fct-5 (Xf77S22, 7,f>y 

rs2 3) . r^i'T-^Haottaj/irjEssi i 3 

& *U5r5&?>ift 9 ttifi/UjE a»fr;Hifctt (Xfv7 
S2 4K 3l|gfi^^-ybc0ffl»P^#ELTn 

yr^A^-yh, «ilj«l;^>yK «J$W^>y 

[0059] fc £ hX\ f-V ^SS?-f >?7i-X 
( I/F) l l 5li. JSftStt+^^^^OSO^SJR 

1 1 4tf+*;HlfWj» l 2 3NK*ti 

S (HI 2mfyrS5 1-Xf77S5 3) . 
[0060] 3>fyyA-y-7 hX'hh^i (Xr-y 

rs2 5 ) . ^-^^afoi 1 4ii, mm*<M- 

1 0 0O7-f/l/^-Sl 1 6fcfflrt- (Xf77S2 

8) . ? 4)V?-mi 1 6Ta, ;ii^rx^7>-7";P 

Ul20s\m& (XT77S29) . 
[006 1 ] *3IS»^ » hT*l.*^{4 (X 
fv7S2 6) s l-vfrlsSIRMl 14fST, 

1 6T^aMfm«8i'9iti 1 7^5M^^. a 

-^#i»S$ix!> (Xf77S4 1 ) . 
[0 0 6 2] a^ryy^vUcSWfiiEat 
HI l<07n-f-v-hK»-5TBL<RB^t6. Hi 
0 OXt >y 7°S 2 9X"rZ7 JV~fM& 1 2 O^M^tl 

-MBPF t *^^ V M$ fi, *h. -v *n^f - [U 7Ji5 
1 1 9tit$tLl>„ rX75y7"^i51 2 0*^^^ 

[0063] *f-**>u*-atfi& 1 1 9«. nnnjgtf 

1 1 2T-c03I^^^HtS'i^t^tl.^^Jg^S^ 

m^mm^co^mi-^ ^.tunr* * f- 

-1SW1 1 83&»fe»aj«. tSr*)^, HI 2t*t 
±d(£, Sm«Jgl8Sl 2 214. -f^^HtlgATJgBl 2 
3 *>£>3I»g3*VC ^* f-r */14MfF & 

mm (xf77s 5 4 ) . 1 2 1 t-r 

T'tlB'ltS tLT v ^6 H 2 L i o */HSl^W 

r i j X'hfUl rfpHfj s r o j f*ti(f r^ffp 
^Tj ©g#*f-^*/^-aj*»l 1 9ta* Ur-y 
7S55) . f-v*;pdf-aj*«l 1 9T{i, S^ilT 

* fcfljas*** r m j f - y */ - ffittss i 

1 8^t3yf>"yA77 h^^KOtiiStLJtf-^^ 

^-mvftzwoj-v *)v*-*^ *)v*~-mm 1 

1 8*^«T. f'X?7y7;« 1 2 O^it-t (Xf7 
TS5 7) . flgM*^ r^ftiu "CftiUf. 
i3yf>7A7 -y h K|WiJ!HI**7"ti . 

[0 0 64] TX^7>7>l^g|51 2 0(4, 
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wc 3 >r yy^7 >y b fc***i*i»*fl:*fifc3 vt 

yvmrnzmixtitfi-ti mi 

-Xf77S3 3) . 

[ o o 6 5 ] aac. ^ewffp^-y nc«t-*«HtH 
1 3kz^t7u-^~v*mxxwm-h> mm 

MJVr<vV\i7 <)V9-mi 1 6*6ft9MfMHBft9 
gPl 1 7fcSM£ft.l> (01 0<50XT'y7°S4 1 ) . d 

S!f^t7-?ilBl 0 5:6^7-*«*tt#-t 
£ (01 3WT77S4 2) . 

■th (xf77S44) . m.^iit^mm>^vY 

*HHft»l 1 Uf?7S45). 

[ o o 6 6 ] mz, mmm><*v vizmmm^ 

\ vt0 1 4 tojcf 7 n-f-^ - h £#Bg LTKWtS . 
ISi#^ 7 hij7 1 6*^«J$Wff 

fBft#851 0 4fcjM&:h.S (01OcO^f-v7°S6 

i) . zzx\ msmwvh (co*«^») *»t 
sffisx i d mmis i d«m« i o 6 tc« 
mztiT^i&'mw.<D%mmwi Dtm^-ti (014 

cOXr-yTS 6 2). ttfflSfutgfiga I D#g§£S 
3®W***«#L Uf77S63), 'mtX®t>tl 

tzmmwm (05#k?) 

OfflLTy-^ftSttSl 0 5WMIW-S (Xf77S 
64) . 

[ 0 0 6 7 ] at. a^sftfcie*«rtiHfitt, mmm 
mm 0 7izmt>ti&. mmm&i 0 7-ci±. ;<oi? 

rasp 1 oa&mztix\*&ipb ; ri'?tvm%mm 
*m^xmmtLxi"i>?)im% i *m%L, mmm 

ttfi^f^Ai* fc -g: LT jW5:W=afc* S Ti"' 
^;US**«®E-tS Uf77S65) . 8HEjW85&L 

SSI 2 l^fSttLTJ!SI*»i6 Uf?7S66) . 

[0068] ja±R«ufc J: a t. jjbb 1 comm&m 
mimmsmmmzxtni. mmmwm^mmmm 



am u « & iwmt-vm&tx ^ ^m^amm 

[ 0 0 6 9 ] £ 1 <OlSSBKBT(i, 

m5cr>mkmmxim-t&) . mmttzxd^mwi 
mfflmm*Mirmmtimtcr)mxmii-& ztiz 

oiwetasi 0 1 , &&mBio2i*fc%\,->) 
mm^imwxh ^tk ^ ^mmmwimm 

[0070] («2^Mfe^J) Kts V^< ■oipOJVJ 

mmm) nmmz*>izt&^tti&mm-mmtii> 

[ 0 0 7 1 ] £ cox 0 iz-ti z t iizi -oxgimmm 
(r ^»ft-r & mfr^MmmmmtotzMzmm 
atty*® (*ft#*>«) tti>^»* i: Sr<^o, * 

[0072] m 2 commmm izm&mmmw^m® 
cvmm&ffli 5fc*t**« 01 5tt»^T, sosrwafli 

iifgfcli, SSSHWl 0 2, ^f'ASl 0 1 J2t»fc*«5 

omasa- y/* 7 $ijfp 5 wit \z\% h m &coxmit 
h. mm. m.m^\ 0 2««^-yi« 

[ 0 0 7 3 ] 0 1 5 tisv^r . mmm-mit -t&mm 
m^-y hv&tumtmt&mis&tfn 1 vmmm 

fc*flr^tv^. HPS. *a$i»N^'yhcogfl#litt 

m 1 commmm mix-hivx-. sxFv&Wi ^x\^ 
[ 0 0 7 4 ] ^ 2 vmmmizti ^x. nm^xsm § 
owjfjfp ^ -y ni® 1 <vmmmmn t <o ( 0 7 

JfjcOWIfJfpy^-yb (filT, ^-7>YJ^-vYtn^ 
[007 5] 37VMjr 7 ha01 6fcS1" 
«±. *#<W-JTHl7K^tJ:3C. n^yKltSij 

T-tsfisa 1 Dcoafc ^cogfisa 1 D<oaysitafi 
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ivm&i^wm. i D^tgfi^a i Dn&mzni 
^4. ^ort»ii*nreB**»t (»ftf#*>«.«o tt 

4 ^iMgffigS^^[6]jiftS^«« 
HBfr*- 4 fctfxo r y j 3 vy FT* 4 
£ fc *mWht$W3-?> FMBfFT**. J2TF, 
r US* y j 3 v y f £mtt 4 

[00761018 (4. 015 fc^Ucft£3filtB<7> 

6fcftW7n-f-v-hT**. JiTF- 01 5fc££. 
0 1 8 fc»oTffia<0SS*i.£Sffiirt4 . 
[ 0 0 7 7 ] t-f . 7 1 1 6 A^flMfflfflW 

mmff-tmi t . mp^ «, f immmmmn 
^(Hi4«H) tmmnmmzno (xfvrsn 

-^f77S76) . 

[0078] jiWJfPffffifl^gP i o 4 Tii. 

7 F#3Vy F'A^y FT*-3>t*§-&\ A^y M*JC03 

y F 7 F 4 VSiM- ( Xr 7 r S 7 
7) . SK^v F^mtynvyFv^-yF-C'&ft 

[00 79] tW-wefF^J-v 
SffiSSS I DlSlftgB 1 0 6 fcf§Sft§trO>4 istsos 
fl§t« I D Si& ^ 7 F ft cogflitil I D t * 1 Of 

■om^i-i Ufvrs7 8) . d^T-i^a^fig 

■ I D^A^y M*HC*4*lTV*k&»ofcJ|£ s was* 
WMRBEV 10 7(38*. 

[0080] IWJWfffiilfiElffl 1 0 7 Ttt, fy^* 
§^fl»g«l 0 8*><5,«IE»*]R^LT, 
;t*S*«gE-fS Uf77S79) . WfMM&i 

sepias 1 2 5 ttT^ai 101, iMSfias i o 2m<r> 

(mm^y^ti ) gvm^m . wsmmsn 2 5 
mtitt^nx . znm^m^m^imm^i 

X. ^X^m^hWiMZ-th Uf77S80) . 

[ 0 0 8 1 ] xf 77° s 8 0 xiK^mmmw^m^ 

■fetfSS fc =flr 4 *<9», 0 9 fcjj* Lfc J: 5 JBfc 
ft3Mgfi^i^^fWgffififflcolI3iJ$iJ»A^>y F 
£3&J5r fijIftHH^ LTgff-f 4 i fc § . 
[ 0 0 8 2 ] 4tJ, iiTlp«Bi:l4»*lftfiBiliW 

mmwMmmmjk (mm zmmlx^z, 
ft, «B«aa5i 2 5ti. *mmmx'*yi,z-%~>tcM 



mft LX gfl Lfc« i> l < tiSft L % < T t, -SfJISI 

[oo83];oid tffiWjftA^ .y f tmmtm 
mzmxmtti ztiz^x. mmm/^fj 

T* 4 . KLLTIg 1 cOA'yx-y 3 y^^^ftfcs . 

[oo84] ( m 3 ^mmmm ) m 1 wmmmmnm 2 

ws'ux-y 3 yfcovvc&Hjj-*-*. «sw#ff^^^ 

y^-*^?^f6]»t@fi^ffioT3*fi-ri.^t. » 

^ L*^fc«>-b y 9 -Mis Xt Afgfl-C^ *v 

4 . JWt 4 k^dm (cliBEtt^i* U 
KTfcWrv 1 2 ^HJfi^ffi^) i a ft-fe y ^ - 

w 

[ 0 0 8 5 ] * 3 eomtmmm h wmmmwcom® 

oaWSBIl 9tScf . 01 9ttJV^Ts ftJSifrCEft 

sii4iffiffl«A^ 7 ^gf# 1 m 

frr4HS'JMffiiA^.y Kowjgfc z<7)%mwmimzi 
[0086] %3<mmmx\t%2<nmmm.k n 

mmk avy KiSflffl ( 3vy Ha^ .y h ) 2fflffi 

T*4. ^'lf«ffiifffl^WffllA^.y h«f-^« 

figlim 1 co«miST"«iB« U; *> <o fc ^l#t"S> 0 (07 
( b ) #HS) . 37 y KA'7-7 ho«JSt^20SeSBB 
BTRWLfcfcW (016,01 7#88) tmKtbh 

t>\ *mmmmxiz, avyvmmm&tiimiz 

ML-ty? -J\cofflt Zfttt-f 4 3 v y F 4>B5ffpe* 
4^**^* 4. OT. icoid^a-vyFS^Pfavy 
F fc Pf V\ ^c/)A> y f ^^uf 3 vy Fa'-/* . y f uj 

[ 0 0 8 7 ] 02 0(4. 01 9c0ftjMSfIga«ft»& 

<r>7xi-T*r-YX\ HTT14. 119C1I, 02 0 

[ 0 0 8 8 ] *-f N 7 < 1 1 6*^fflWW 

0 4 KftjSftt i tySfi^^ffl^WJffilA^ 
7 F#«3*i4. SSa°^7 F^'ff#ltSiff^#raL. 

SMA-^7 h(4^'tf«flfflOA^.y FT*ofe«^ 

a. mico»^i:i5iaco^ii (0i4#ss) 

(Xt-v7S9 l~Xf 77°S9 6) . 

[0089] iS^y- 7 F * J n v y F Act- 7 F T* o te 
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§ (xfy7S9 7) . SIS^^h^nfnvyKA" 
v-y h?&f'm{f8H£»7-rs. 
[00 90] f&lfrjvy h'A'^.y gfl 

mm i D«jft»i o 6 tftttstiTv^ iga^fis 

9.1 Db -y h ficDgftit* I D k £ 1 ofof 

iH"4 (xf77S98) . iiTlSB^ismi 

BEtfl0 7(3*&. 

[009 1] fflgMffiRffiiSiEa 1 0 7 Tli. fy^/V 
S4^1f 1 0 8A^E§f£ffif#t/?. 

;L*S£I»I> Uf77"S99). fy^/H^fl 
mEtf£8k Lfc*&fc8SHSr»7 U Ljfc«£li-fe 
y*-$Btf»l 6 2fc-fey^-A.co»2r^-ri» to 
-fe>^-f6Bf»16 2{±-by^-ISBHi» 
15 2, tfASi o l ZMLX^y 9 --^cnimz'il 

0 (ZtvTSI 00) . 

[00 9 2] dcOidt, flWWW'tf- -y 1- ffitl: 
-fey? -IS^scfrflMffiiiilSog^fT 3 . gffig 

m.? a s y/£ * y *-mvmtt zk^x-ox, 

[ o o 9 3 ] at, ^-tML»Pf 

W0»ffiT&gft§ti4^>yMi. 12 1tetJ: 
5fc. flWHI8fFfcflMII*#36>fe4-»T^*. 

ii, iMiii'. 17 (a) fc^UcWJSlJfPA-v-vhfcPI 
Sto/^-yb (JST, iWWr-yhfc. f6<O2S0gW? 

JO t^b-y^^y hbuztfyz.^"/ hbtfh 

4. 

[0094] ffiijftijffliy^ Mi, H 2 2 fciStf- J: -5 
fif»tS'J7, VX?-§tiS>J7, «t^fc3ftfci8Mf« 

Hiiti,^. iit39&flHB4. H5fcH*ea 

4, ftVy^7 Mi, 02 3tSrtJ:dfc:. f-v 

t, ^^uy^^ki-^uy^wm^t^^-oxa 
•9, ^l^y^S-fkJif-vuy^'fciiffftLi.-fey^- 

JBSSTSJg LT v * 4 v y yi±, gfiiga i d i pju 
ishit w^yy, -mm? it m\ v&toti 



m^tttz^uy^mmmmxim^. m 
zzx-^mmx-m^th^uy^x a t$t*r- 

^-tl&^^l^yv'ff#*#:^IEatT 

ant*-*. 

[0095] ft 1/ v F Vy;^^»»«ti 

mik -b y u^n o #*^fi mmh%^ 
ittufecikT. ii^SfMSB^ (-ty^-tsji 

&iuC^4 ) iEa*ilirc*4 - fc £ £: fc* 

4. 

[0096] i/X*-yx^-y--yb(iH2 4t^-fJ;d 
WWfPfc. ^vyim^b^vyvm&fo. v 

xxyxwrnm^tc-ix^h. vxxyxmfefc 

t> (f ^^y^fffg*ftk^]«t) fti/yj^ltJ: 

[ 0 0 9 7 ] H2 5{±. SfI^K*\ » 3-^y K*5 
it^ftOMail)^^^ LJt 7 n-^-v - h "3 . fit 
T, HI 9K*#02 5t»oT«H!^aai*SiBW 

(xf77sioi), m^mimm^immt^ 
y?-mtemzti& k , ±y?-»i>mwmji*y 
h muz tn . %mmm* y f-vmatmm 1 5 

1 , *y^-ISB»ta5 1 5 2^^LT«WA-y- 7 h 
&3E«t4 Ufy7S10 2). SftL^N^y h 
tt, •by^lBBi^Bflfasi 5 1^il§tl, CiT'\ ^O 

^°v--y vwmmmnfrhmmm^-v vx-hht- 

[0098] *y ^-HiidWtffS 1 5 Hi. i!M 
L^N°y--y h#+ J rl'yWv (Xr-y 

rs l o 3 ) . v^^fftss l 5 2 t^iisatt 

Uf77S106). ^ffl«ftffl«iJ*lJfflyN°y- 
-y h-C*-3fc«^J± (XT77S104), ffiiBW'ft 
WK-9«1 04^iSLT (XT77S107) . %\<r> 

mambmwm. (I9«xf77s 3^777 
S9) \z^xtmmsfi®&bwa<ym*ft 3 > u-r 

77S 10 8). S«L^^°7--y hj^JJjV^Tfc* 
4>o^lli5-t LTStfrWiUlIliaS^LT-by 
(Xf77S10 5)„ 

[0099] ^t. i^7.*°y7.y^y-7 hcof^&isXUm 
flBBBUlttteov vc H 2 6 (est 7 n-f-^- h 
tRWi. ux*°yxffjf;g|5i 5 2(i, 

v"-y h4>W^^y^'#^£#B§l.T, -f-rl/y^a 

Thibet (^f77s 111), sfi^ai DBtt 

»10 6*>feSf^HlID*]Ri9ajLT (Xf77Sl 

15), ?i<b!$Li ! bt>tifcuxxyxmm£iz%mmw 
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I D £SJH LT0 2 3 fcjjtt «k -5 &PX*°yX;\^r >y h 

£«L (xf77s 116), ^y^-^iMfi-fi, 

(Af77S 117). 7X^-»l|f^3l^M 
Sf-^y^'T-J) (X-f 77S1 1 2 ) . 

0 336»fe^^HWWI?*TO»tT. flu 
MIHWfcl/X^yxAir.y h£ffr£U -tey^-^jMft 
•tl. (Xf77S 1 18~Xf77Sl 20) . 

[oioo] #&f&&o?-v \yy'JX'h->tz^\t (x 
T77sii3) . m&t^f-tx'hh&^xsyv 

flHWcfrfcWiLfc^-y h L (xf77S 
12 1), fi!4?Sllf§«l 5 3^fi5S?gt£K#LT 
(xr-yrs 122) f-*^yi/ti!##ttfcSt-r*»& 

fcfftfct* (Xr-yTS 12 3). ffcSSflJfcS&H:^ 

coj^r-fey^-AjMft^iii) (xf v7s i 2 4-x 

T77S 12 5). M«£ftT^^^>vfiM8#± 

^-fcSHOT* (Xf-yTS 114). 
[0101] JjUitftfligKJ: ^>9-mtK WI 

t^ux^vxA-^-.y h*^sissfisa^iEatt^«i 

BLfc±TflBOM»^'y h ZW&th ZktPC* Iff) 

x-fc (mi nmmmx'^tz i o & > N 

;^£fcJ:oTgffS£S#'ff«fIIit« (-fey?-) n 
o Sims t * y * - 1 ^la-cfflsBttW v > s 

fc # i * i 1 1 "TINT'S) S . t t , $ 1 coHSt^JBT 

[0102] tli^2«^'Ji-yH^«f^ 
*. 

[ 0 1 0 3 ] ^ JR^lfifiUlt iSffl»IJfW*AtJr.y h}H 

Ti^id^RggSft^xf Atfcv>-cii, fS2, 113 
& ) r? v y V coSS (nvyHfjff) #S! o mx\ 

m^i,zm±^mmzhicox\ m^nmzmm-ti z t 

tt. #gftgafflMW3vyFA^-yh^^T\ i&? 
ffi#BS«fflOfflS'J|!J»^ -y h £3£fr|ft|HHrCj8<f'tS 

[0104] Rh<0HtBB)IStt5^T±B*«a*ISe 

gftssi o o<7)*fnreft-3x^&ff. fx^yyy;v 

r'X?:7y7'7H$l 2 0(2 (SjS3>t- 

<xmh^tz>sbm&mm^mx'hh. u&»u -e 



MfflfLftH) USSftMl 0 0co»* I Ctf-F&fc* 

mizti^xmaox o %mt> m/sv#> zzt *f* ft 

[0105] (|4«*i«Sj) ^4^M«, £ 
ffl^XxAtiVX^-a^T^ftiMgftgaT'itjiT" 

( ^ft^Bt^aw ) vx 1 x ^ $> <n 

X\ H2 8fc^-J:3t:. 7-^a**fr4L*v^fB** 
«8USfc:SfoT^4. itfOi 0 ^H^gfl^XxA}^ 

Tl 1-243 536#gB) . L4»U VA^-iMt 

[0106] »4<oidm(cffi«^5»E£rio9ffi 
<o« e^h 2 7 t^-t . s&4 <D%wmx'\m 1 c^^ifi 

vhWBv^w. fit. mwmmmx'tev-m 

WHEL*v^T. SttflMUH 2 9 tSrT J: o ^gfi 

^'itfgieftffl^a0j»^ v n (H3 o ( a > #bs) 

t^^^df-|eflfflc0*ffl$lj»^y F (H3 0 
(b)#M)cD2SW^^tl§„ 
[0107] f-^*;W=3f- iefiffl<04±aSW^'y h 

a. m\o)mmm<n^ m&wk) mmx-hi. 

vx^-«4jSflHBEflfflco*jifSrj»^^-y Hi. 03 

o(a) t^-iat. 'fffH^ff. vx^-^tis'J 

[ 0 1 0 8 ] 'IfltliSiffiiai^^ -y YtP?X 

^vx^-|^1W6omji2:|5&±-r-S fcftO fe <7)X'fo 

o . * i commmmx^ ^x » & t t 

IRHm i 5 fc « . ^MHBt#t J: § t, 0 . 
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[ o i o 9 ] mz. H2 iconm^immcom&k 
mmmz^xmmti. S4^iiic«»i 
&m&t<MBm>mim i ^ s& 2 3 

C 0 1 1 0 ] *»J»A°^y hCOgftffiSIS^^V^T 

H3 1*fc*f7n-f-+-ht#!HL'ClfiW-*. 0 
3 lTIi, gfi§SM#9t»JffliA^y hfcSHU £il 
fflW^v *fl^-3H 1 6*^«iJ««J 

[0 1 1 1 ] ftM*iJ»|gfa#gPl 1 7tt. IIS 

3oi). ^*)u*-mim<v&mMffl^vh?fc 

7^^HHS(S» 1 0 5frt>W*t& (^T77S 3 0 
2) . l»Lfc^X*HKtt^T>t*?h*>»*HW 

*a#-r* (xf77S3 0 3) . a^u^s**^ 

[0112]-*, W8Ui>t$r<y h*iVX^-|t^ 

05K 3»t**h*$»v**HMKWFHMflJ 

*HWHlWl 0 3lcapt*-4*>54»tW&f* (xf 
7TS306) . BEtfl^ilft^li-ei-CiRT^i. 

5. 

[ 0 1 1 3 ] * t\ ^^-fiteJSfliaSgES 1 8 1 

T77-S307) . WBfeftUfc*^4»7. «@EJSa 
? 1 8 2 T\ §K>t* -/ h (c 

VXMZ%->X~?X?-m>£8LL Uf77S3 0 
8) , **5^3;hfcvx*HKv**H»ttMIJl 
0 3t*MftLT*Tt4 Uf77S3 09) . 

[0 114] ;;t, vx?-gl«ti!$St -?x?-m 
&$SBMflWfl & '> 1 1 4 < T ttfc £> ft \ ^ v x ? Hi 

fllffir* D , SLSc H k -?x ? -m^U 1 8 2 coi^ 

cD^mzi*)~?x9-m : £$Lfci'Z>i>cDVh$>. ^mt 
&m mam mm& & x t, %£±.<ommm^ . 

[0 115]^. 30Sn«ififcJ:oraMIS*i4«J!l 

-y ^sit «t oiwtMi® i commmmt mmx 

hi. 

[o i i 6] &i>\ m4<7)mm&?Mz^xi>mi<?)m 

Wm.cn) <yx-y 3 y{i2,»3 «w ) £3S 



[oii7] m5 »fflw ) m 5 nmtmmim 1 

[ o 1 1 8 ] 03 2ii. M5commmtemwmw,it 
mwm®mm*^itzi>cDx\ wt, 03 2£# 

JHL=flnF6H3 5-03 9t:^f7n-f^-M;i{ 1 S 

T03 2 iz^i-^mmimmmf&kmmmz^x 
bps**. 

[0 119] 03 2fci3VvC, jDA*T-^^-X (D 
B ) 2 0 2fctt. ZXnMXIgnmXgT-fifiWlh-Z 

mii77?\ ^up#-f^^*-5Tfco. iiiijs-ttoan 

X%r-9X%h> 

[0120] JDA^ I D fcte*flDA#lZ#f LTf«ll3fl 

f> TMAX I D j ^&Xcr>^tfJr*htlX^hk-f&> 
gflSS I DiijDA* I Dfc^tJDA^Sflga I D 

wnfon (fxt-mmimi o 3 ) 
x^-fcawwfT* o . -?x?-mrmc?x?-^ 
mmzttmifz-?x?-mx$>i . ^-v*;na9flH8 

ii. 02. 06C^-ti3t. il£!lDA^^^m^ 
7 0 , r 0 j (0B#*5Mfl, r i j co5#(43M(I» 

fc<0. r o j OB#!4*iIiefI1-|>£W^v^^^L. 

r i j mummmthmm^^Lx^i. 
[o i 2 1 ] i-r-m. ffiiJSWA^.y hsogeftii. i 

1\ ^K*|Sl3ifitTffiftt4fc^fcL, ^<7)L 
KStt5ffl«'JiiHl»/^ -/ bOiBfi^^r&Jfflfl^SKM 

h. ttz. mmi±mmA%co%immizmmzti 
x^&WjfoMimmcomm^xfcz, tt&. 
i o 1 2 2 ] i-r s 03 2t7)'iffgiefigatfeft^>ffi'j 

13 5CSt7n-f t-H:&St»l»„ 

v-rmwmm&mmzmwwmmmmmi® 

2Q6l,Zj;^xmmZtll» 

[0123] ffiWfPA^.y bi«^^ffilJSlJ»|f$g 

fj»2 0 6A^Sit^fflJ3W#lf»^i52 0 3(4. 
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3»k = 0Uf'frS3301a) > i = li:L(X 
T "/TS 3 0 1b). mxm I D# i X'fo&tMT- 
f-bmxmD B 2 0 2 rtfcflEftt4*^4»*f-x -y ?T 
§ Ufv7S3 02) . #ftL!fit*>-5fc«^)»lt 
8*4. #ftL**»-?fc*^tt, Xf-yrS3 1 3(Cjl 
i%l^y?V*yhL. i^TMAXIDjSr 
SH.3:^i:£?igU:±"C (Xx-y7°S3 14) , X 
T?rS 3 0 2^MD , *fU> i tJPA# I D £i?-x >y 

[0 124]Xx7 7°S3 14T*. i ifi r MAX I D j 
7°S3 1 5A.jl^. iPA^DB2 0 22r£#$tLT. * 

^ojda*?-****^*^* 1 mm&y 

# r 0 j TftiJaA^r-^* 1 ***^*') £8aft 
S. i;T*iMft^PA#r-^^S)^H\ k (flPA* 
D B 3 0 2 ficoflp A*T- ? CO k 0 g cO^-f- k V ^ * 
WO 1 1^4 y?VX>hl (^f77S3 16) . k 
#N (fWHiStOfcttt) (Xf77S3 

17) . znm&xmx^T-tnmmfryyytt 

ro j OflPA^fc-^Tfi. hHSttFft 
3Ht?ffiflH-*<0SK«>. i*ft8¥&7x:/# r 0j o£ 
X<r)tM<nmx^~9(nWmmmyy^ r 1 j (c 
LT^T-TI. Uf77S3 18) . k#l£]l8*$rtt 
ilff, Xf 77S 3 0 1 bfclJID. i = 1 KtTfiWW) 

wmzmm-t. xf?7S3 1 stanx. 

r 0 j ^MA*I^3-H3^H*Ui»Tt-*. k 
#N SiB***^ i = lt LT*T^'J 

[01 25] Xf7/S3 0 2t, MA&ID#i<9flP 
A^lrf -^'«E iiaPA*r-^+^3IfI 

X\ Xf77S3 13Aa». i*i-o4y9Vxy\> 
Ucf*. i^TMAXiDj ZMlX^Wmil (Xf 
77S3 14) , X-r'y7°S3 0 2'\i! , 9. JoA* I D 
WfiR£f-x>y?fcllS. ft. Itf) TMAXIDj 
S * X i * 1 o^M l%tft>MAm I Deo 

#s^x -y ? £ff a «sai±, TX'i>&«ffli&%mxh 
icox\ ttTcvmrnxamcotzM y?v*yhim 
m&zkizti. 

[0126] Xf77"S 3 0 2T, JnA* I D = i (OM 

^yy^mmtx, rij T*ftttaHS*«W>"Ci 
£ i-o4 y?v*yhlxtMiD<7)ft&^xv?iz 
mh. mmfryyft^OiXh-otzmit. mmm 

mmzm^x&Wj: T 7-7m£ T 7-7mDB2 1 o#> 

^ffift-tS Uf77S304). ££"tV7-?«± 



[0127] ^fflmflBMR£$2 0 314, KflSflfc 

y-^«fcai»A#T-^c7)gfiSBiD. ^--v^ 

T'j?)im%$L$m:m^x. c\<v$mwmm&^ 
mfctt zkx^y?mmtimix. ms^t 
»^ ?-mxz ff&s&itimimimtt. l . vx 

^-Hl^ij7^'ff#r^'J7^-f«PLT. @7 (a)fc^ 
Lfci 3=Srffl8"J*iJfflI^^-y Ur-yTS 3 

05). 

[0128] fMU^^'y Hi. ffl«J«»J» 

2 o 6 £tf lt mmnx%T-? *<nm 1 1 

fc. 3lSfI$MM2 0 7 fc«3*u jMSflM«2 0 7 

{4. i^Df»^*ffl^TaManiA#oHitsL.fcK 
m%imwzm-tz> (xf77S306). ^wjw 

fc*t t lfg5««^JE§£3I LT<I^r^o ^:«^{4 
(XrvTS 3 0 7). X5-£B7J§|S2 1 5*^gftx 
Uf77S30 8) . Xf77S31 

3^51^, lyrvxyhumtfiix. ^cojpa^t 

[0 129] Xr-yTS3 0 7tfeV^T. »BfteWUT 

ixfero b i -7 x s L^fflK«»J«^^ -y h S- 
3S«t4 Uf77S307). Mflf*. -mm^ 

o) . mmmmmm32 0 6i^ msmmr--* 

2) . Xf77S3 1 S^jt^-O-^'J^yhMS^f 

[ o i 3 o ] y ^ y ^ y h«Hoawc«>aKfc i a 

t*«H4. i*« riviAX I Dj *sa^ s ^:-C<0jDA* 

r-^^iS^rab § £ t tmst **» ( » 7° s 

3 15). k*>m€«N^«^, «J3W»y^-y h<7)?^ 
JSrrtFMfflt i*Eflltl«>fc«»7t-i (Xf 77°S 3 
18) . 

[0131] 03 2<nm£.£ *)#mwwv 

htmwm^-v h k *mmzizw»mwmfiF 
k z commmMmmzmm&mz^x . m s 6 

s&t i5is#tifi^$ti. mmm< mmm< mmzti 

i. t-t. £»J»M«I52 0 9{4. f-^*;l^f- 
T-^^-X (DB) 2 1 lSr^*LT, *>N0f-+* 
*IDifoft*H-r-?i8lit8 (Xr-yT 
S40 1 ) . 

[0132] ;;Tf-v*^#— f-^ttf-r*^- 

DB2 1 ltfi«S*LT^4f-+*^45^«Sf<i:fcf- 
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* , f-ir*^p-KffF (IK (IK 
+**>/i*-m& ( 2 K f-+*/Wf- ( 2 ) *»fe«r 

SDB*SLLa#*"C*4. f-^MBBifftt. flBSg 

OlQBKB'CfiHB L **i t m tXh h . Sgfc** 

awi? ai^f - * t » i ~m 4 mmmmx 
[0133] ££T^*;i/*-t*wi5Sifffc^r 
( 1 ) ) kmz&htih^*/^- (f-f *;Mf 

- (2) ) *~mzmmhmm%tz#>z'fo*) . m 
mzx^x mmm $ tix \ > t * + *; wf x 1 

[0 1 34] . ftiM3Mfi$iJffl!g|S2 1 3*>fe*31M« 
ffl»J«2 1 2^»J#P^«y hO#*«**ftflrS 
*l4 . i oT£fflM««MI52 2 1 tt % 

ftjifSiJ#fll«^jS»2 0 9m^-D B 2 1 1 £ 

2 0 9te£ft£gttT^*;Mf-DB2 1 1 Sr^L 
Tf-v^/l^f-T-^^BX^-TS (Xf77S4 0 
1) . 

[ 0 1 3 5 ] ifc. BG*i*fiSiJfflS2 1 3*><3flasiJfM» 
fi!»J«2 0 6^IWJ»A^7 bcOtfr£iSM^$ 
ilS . Z Wlft^z X iXmiMfflfflfflW& 2 0 6 \ffi 

mmmmm 203 kjqa^d b 2 0 2 1 
x, mmmyyw r 1 j 1 d£ 

fflBBf&S»2 0 6«S^^^^(tTjDA^D B 2 0 2 £fc 
*LTJnA*r-^*K^'tS Ur-y7S4 0 6 ) . 

[0136]-*. mmmmmm o b 
# ut^+ *;Mf ~r-?a> *>vmn. 

A^-MB!HF < 1 K ( 1 ) , f-r*/WF 

HWfF (2) , f-^*/l^f- (2) £JKfcU @8fc 
* Lfc i 3 &£310ffl^ -y h h ( *x -y 7° S 

4 04) . tm. 1-v*JUmifr**-K.lX7-7 

idb2i ommi. MWtf-**)wzm-&im%7 
-?«*siaju mv-fmzmix&mmw^v 
hmwtzti&'<zm*wftic?&. w=, its? 

- ? H?) V - ? itHSff ttSHB3!FF £ ft ftf £®f J«i 

^7b«L, *a$wffl»jfpa52 1 2. mm 
ftfj»2 1 3 ^n* txmmm2 1 4^9 , a 

ilBMftS52 1 4T1il^^-y h^ScM«fc«g*T%fl 
•tl. (Xf77S40 5) . 

[ 0 1 3 7 ] <fcfc. fflSWfP1f#«ai2 0 6ftt, JX 
tUZ%^xm% r 7~?mi r 7-7MD B 2 0 4 



(Xf77S4 0 7)„ SttrftjimfciOE^ 
BHL 7-?«i3f»A#T-**?)gft 

artt«#tt£fft£U r^;i«*4jjaHittS2 0 5 

£fWlT§. MtSfgJDA^T-^+cO-vx^-ftt-S 

^itfg^BS^tL, ^^HMffise^itiriise^ft 

8) . muLt:**** v\tmwmmmm2 o 6£ 

H&LT. ffi&m«W2 13(3K3*i. ££*63 

-v h mmizmitxmtti ( xr -v r s 4 o 

9) . 

[0138] Mmmmmz. &mwiir«, h 

|iJ^a*«3***^Oi5^t^^T^^itl. few 

[ 0 1 3 9 ] H 3 6 ^l^HJfcM 0 . 1 fficOftjIMffll^ 

^fl^^fi^^^f04l)tfcAI.. BP*>, *3i$lJ»lt 
fgffiMg|!2 1 2\Zii\^XVXmm.mY»2 l 3frt><?Jfe 
StJ: O&^-Y^/Wf-- f-?^f+^K-DB 2 
1 l^^ttffi-t^ (Xr-yTS4 10). iiT'^tfOf- 

t«*f-v*^f-r-^«)f-Y*A' I DO«fc**V^ 

-db2 1 1 a^ftart* (Xf7rs4i4) . 

[0 14 0] 4fc, jDA#T-^fcWUTt>H«fc> ft 

mmtyjrifi r 1 j -c&ssba^t-^o-^&da* 

I D*%faMa^cojDA^T-^OjDA* I DSrSi. 
fc+T"ft/hOfcc7)S:ttajf§ (Xf77S4 12).; 
it. *<9J:3*m#T-?# ! 5rf*Wf« ^J^JflA 

2) . 

[0141] i^^ftE±iLfcT-^!i:^^mft»JfP 
ff|g«a52 1 2, ffl£gfflffiffl!$ffr£$2 0 3t*5UT 

o t LT JSSSBBSWfe IBIBr* < » & «tt S . 
[0142] ja±<0KBH*><5, t,Hg<9*«5r i 3 SiiM 

&fflmmm2 1 3-cfw*L-c-£<o«i-&-c3i9rr 
[0143] (m6<vmmm) mz, ^<nwvj 

x-i/aV^SS^i. |lWN'iJx-y 3 yaT, -fe 
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vy w v \> , fflia*^ v b s immwvr * f 

£BHtt S fctfxo-fe y *-Mt»tt fcfufcfflf SiefiSB 

( y * -sts* § v mmmmm tm 
6<r>mimBkixmt&, 

[0 144] l2^ l Jx-y 3 >tU< -fey?-*» 

wsa» -fe y 9 - izmz * h k v ^ * 3 nmtmmiz 

A^r-y K i^J»A3r.y hfcffifi** 

swisaatfassfc towrgKHta. 

S2W<iji-i/ 3 ym7 comtiffiMk iximt 

[0145] m6^»JS»fiJWil,'lf$giefi^^Sg|5 

offiAfttt. m5<D9mm<m& (032) fcuwc 

IBWlHBtKfW-4*^tov^T, 03 7~~03 8t* 
•f 7n-ft- h CSoTlHW-i . 

[0146] znmmn. fs&XKttn (fltf.tr i *m 
mm i x v *& v ^fiiss t*f t rcam* y 3 v y f * 

i&ft* SO^Sff a . IIJ?ffl#f!f#fl^£|52 0 3(4 
£*l£«ts 11PA*D B 2 0 2 £f&«LT. jMfl«r^7 
7-/tf r 0j ^)lDA*r-^*mA*I Dtf/JvSVifc*) 
*»fe**M«R 0 ffit" ( Xf 7 r S 5 0 1 ) .Z Z X\ 

miSMxyzvywv h<Mtm&*nmxik& 
[0147] mzm^fitzMx^-^t^^fim 

Sfl^aiD^attlL Ufy7S5 0 2) . man 

tzsmmw. i d k %tit>5tmm. i d^romv t*r l 

0 4). issrcgmai i d fc ztih^mm. i dco 
05). teitiztitzsmmw i d t ttibzmst i d 

^fcri'**/PS£fc«as*y3vyF<03vyF«M 

IBBPFSfttt, 3VyFA^.yh*^§tll> (Xf7 

rs 5 o 6 ) . tkmztLtzi^y FA^-.y M«1W 
if#$ij»SJ2 o 6 m&Lxmmmim2 1 4 tj*«i 

X (Xf77S5 07) . -B$. KMMfta2 14^ 
A* -y 7 T ^ t U fcfittSfU «**-4#jrc£»wp'< 
^Ffc£tft}*ilfl£;fll> (03 9M . 



[0148] act. i-^^mmmmz^imti 

htEflW-iiSIttf^. i = 1 fc L-T (Af 77S 5 
08) . Xfv7S5 0 lTttaSStlfc (ft*) MfflcO 

;HaWtat*Cf^T'7-^llDB2 1 0frbV-99k 

^ttaj-r-s (xf7rs50 9). mzm5<Dmtmm 
<m®knmix. mmm^-vh {mmsm 
mmmmm^rv f ) (xf^rs 5 1 

0) . »:tiSiiiA*T-^rtt»sfiiif##*fflv^ 

(Xf77S 5 11). fWftc^JlBtftSiafc 
j£fr|6]3I<l£BSH-* . ^T^IISfi^#^J£^ 
&Vtf§£{2 (Xf77'S 5 12). SfIX5-c0g^X 

7-^ffl5Wi#fM8$ij»2 0 6tiiL. mmmm 

Wm2 0 6TJ±iil^x5-aj*»2 1 5?&fiZik 
(Xr-yrS5 22) . 03 8cO^x-yTS5 1 6^5t 

[ 0 1 4 9 ] Xf 77S 5 1 2T". XPK^S^BHIS 

-y h^jlft-tl> (Xf77S5 13). fflgiJMffll^^v 
hiMfff*. WJ&&&:h*)Jf5@*ffl*IBit* * T"t , 

ssgft sa*» ts«asi*«=sr*^ ( xf 77 

S 5 1 4 ) . S*X5-aBOX5-£fflgiJfMffl1ffgiGiJ 
ffil§|52 0 6 t3IL, ffiiJ0JW/m'IfPa!2 0 6f«. X 
=y-^m2 1 5fc*«x5-tf>B**S3-li\ 03 8 
(0XT77S 5 1 6'\3t&. ^jDA#r-^^il$: 

[0150]Xf77S51 4TWttWJtt f fco;fc*£ 
{4. 038cOXT--y7°S5 1 5^31^. i!gi#@OjD 

x^T-tmsmzi-yv?* r 1 j tux. xf7 7 
S5 1 6^31^. <jc<ojnA«T-^t«a*»'t. 

[0151] 3OTfliA#r-5'fc*SIfctW-|L J31T«0 
JiffiK^T*^. BU*>. i = i + liU (Xfy7 
S5 16). ij6»Mt(li4V^36>5a»tf-i7^S 

(Xf77S5 17) . iai*V^*&tti#SWjllA# 
f-^mtfllf (XT77S5 18) , Xf77S 
SOg^M 1 ). «. maslBl®. *<0illA#T-^tSt 
tT^il^ffo. Xf77S5 1 8T. HOMr-ftf 
#4L4^*^{4. Xf77S5 1 9^1^-. SnA*D 
B 2 0 2tW»L"CafflaF»79^ r * t r 0 j (ft 
A) MfflWUa-Kttta}-*-* (Xf77S5 19) . 
£ i-C 1 «Ja±«JnA#r-^* s aajT & n(f ( Xf -y 
rs 5 2 0 ) . Xf77S 5 0 2^M>9 . *<OjnA#r 
-^Wz#fLTtf5iattV3VVK<OfW*ff3. Xf 
77S 5 2 0T". JUA^D B 2 0 2*»fe lot,JnA#r 

i fc fc=Sr* W. SDA^D B 2 0 2 CO^XCOMX^T- 

fimixmma-yjytf r o j <n%><nmhti^ 

fr&n&th (Xf 7 7S52 1 ) . iClfiWf. X 

f 77s 5 o i^hd. ««raarr*4. xf 7 



(17) §2 002-16565 (P2002-16565A) 



r S 5 2 1 T5MflSr»7 r 0 j Oih^mWt 
[0152] -Jf, XtvTS 5 1 7T, i #'M£Si. 

T-yTS5 19A.jt^ JflA#DB2 0 2Sr^LT. 
SftS^??^' roj T'*>S^c7) (ft*) MffikoJnA 

ttajTSfUf Ux'y7°S 5 2 0), tQfoJ&ff-f 

7°S5 02) tH-jTHOa-f. ^T77S5 2 0tl 

*W7 t fc4*0>T, iPA#D B 2 0 2 <T&X<n 

4***3W?*»fcWW* (7f'v7S 5 2 1 ) . iiT 

loTfcHnA^-^^ajs/iiitr. xr>yrs 5 0 

lOfflaoWDicRS. l-5tJDA#T-^^ftffi§tl 

*7-r*. 

[0153] KS:ftSSE«L)t 

«Bmifrr*4. #§i»Fj.tJ:Wf, £*i#^ffl«j 

fflA-^r 7 f fcjttr rtSflKrtaMN-4H l fcSU: <t 5 

B»awMt«ffl»«iwfcLfc«. -fey^-ffl (H 

3 2<Dfi!Sffifll£M) #^«iMffl;^y ME«<ofc» 

comz?ro?)T. wmms£.xmmiwv f£ 
[0154] mmm^ir-y hommwm 

[ 0 1 5 5 ] £-f. *5iMfPtf»J«2 1 2*><s>#31 
0J#W#«a52 0 9 fc*f LT, */hOf-+*A^P- I 

Uf--y7°S 6 0 1 ) . ft«IJffltf|gf«f52 0 9T1i 
£^7n£gitT^*;Mf-DB2 1 1£«*U & 

*;l«7% ^*/l^f-fK5?iff ( 1 ) , 
( 1 ) , f-r*A**HIWF ( 2 ) , f-r 
*;Mf- (2) £K#L, H8^L/ti^=5rftaiW 
^vhfcffiW-* Uf77S602) . *<9|g, f- 
^^HKSI^df-KL-CV-^DB 2 1 OfcttSR 

^aws-nf^fk-rs. set. sisv-^n^y-^ita 
sfffc -it mm-k¥[\rt$mimvr * f tmtt i , 

ftilSJfflW»JfPa?2 1 2. mi^fISlJ»2 1 3 £i£ 



6LTJS3SSyiaP2 1 4^9, iKMjMffgp2 1 4T1i 
S»t4r „ F ^ JBS»ta*T5att4 (7f77S6 
03). 

[0156] at, m^mmm 1 4«u H3 7(0*7- 

7/S 5 0 1 v 7°S 5 0 7 0^fIT"^§tL^« 

»t y 3 v y hv <«r -y f #*co; <77t^'J 

-tl&SiM'xv ?IX (7f77S6 04), 

7°S60 5) , XT-y7°S6 0 6-^jt^, -7f, #£L 
X7^yTS6 0 5£;^y7°LT, Xf7 

rs6 0 6Aaitf. 

[0157] Xf-vTS 6 0 6Ttt, KOf-**/^- 
I D<0f-Y^l^f-r-^^f-v*;Wf-DB2 1 1 

fettSN-s &^^&iSMffiy»2 1 3*^*»j 

«»J»2 1 2£teLT£M«1f#fft&§!2 0 
9fcg£fc*U *aM«»)tSl52 0 9Tlif-v*;l/ 
^— D B 2 1 lSr^LTf-^^^-r-^^ffiS- 
ff^o Uf77S606) . ZZX\ ttajK^JftLfc 
(Xf vTS 6 0 7), Xf77S 6 0 2»C0 

77S6 0 io*Sl*4jfcR"5» SV'ft/hcof-v^;^ 
- 1 D t of-v ^;^-t- ^ t«BW-4 . 

[o 1 58] zcoxoiz^ ltr^mmcomm^y^'? 

y¥^ir-y h ( iO-^WtWtJfnvyhv^y F) 

4 a y-t a vy . y h ^iSf^t* £ t 2. . 
[0159]^, -igUBBS&wfcft ) 

^ ^ i 1 #Pb1 1 2 Hfiiift < T ti* ^ 

wic^LT , «wy avy FO^T^StHISWiP^" 
^-•y b^fi^ra^fc"*^ l#t 1 ®i,%^b%tt>ti 

h. £03tJ6, *!Si»^-yM2flB|t l 5* , )l.iefi1- 

< % mastt y 3 y F . y b itoffj^-iiStoT ffiv \ 
ti, ztitfmmmmmm i stdst^ft-t-cta 

ft$tLl» £ fc ^SJ#t"# . fflS'JMfll^^ -y Fi*fl 
[0160] (S7(?)»I) •by^-*>fe^Df3V 

mmmztt L, 3 v> - y f , «ij$Wyt7- -y f , 

gasw-tf - -y f mmt&tztbtv* y?~\mzm t> 
titzmkMwm mwm*y?-m.hh^\$m) 
mmwtm&) iz^xmw-tz. 
[oi6i] m7mmmmmmmmmmm^wm 



(18) ^2 002-16565 (P2002-16565A) 



IMBmvvc, 04 O£#BSL&# S £04 1 7n 

;HS^'ff ^^jgi^Bfc^^T s M * if 1 * M *t 
HttSiii. ffl»J«tf»J«2 o 6{if-+^sa& 

ffl^o^sswa***; £> . * -r wmwmmm 2 

0 3 ^mmmmmmmmm umm 

j£ITC203{i, i*lt*»t, ttA»DB2 04««BK 
UT, 3ffll8f*7 5^*« r 0j 0HBA#?-*fcJnA# 

1 D^'/h^V^cO^^ft^MfflK^ai-r (Xf-y7S6 

id. «iEtjsfL3t™at 1 d t^^tsa 1 d 

*««»2 0 5frt>T s J*)im%£jmmiiiL 
x (xf77S6i 2 ) , mMiT^mmmi Dt*n 

«t* (^f77s 613). mztitz%mmw 1 d 

Fonvy KHWFfcfr&H 1 7 £j&tX. o&t-?^ 
^OavyKsMfcS-fWri,. itf0j;dfct-CT"#^3 
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DETAILED DESCRIPTION 



[Detailed Description of the Invention] 
[0001] 

[Field of the Invention] This invention relates to a paid broadcasting system, for example. 
[0002] 

[Description of the Prior ArtJMuch more substantial service is expected as digital broadcasting 
starts in a communications satellite (CS) and digitization progresses to a cable TV and terrestrial 
broadcasting. 

It seems that the leading role of broadcast service is played at future. 

[0003] Can aim at improvement in the utilization ratio of the frequency which transmission of a 
program takes by introducing information-compression art, the steep increase in the number of 
broadcasting channels is attained as compared with analog broadcasting, and the greatest features 
of digital broadcasting are things. Since advanced error correction technique is applicable, offer 
of quality and homogeneous service is attained. 

[0004]Not only in broadcast with a picture or a sound like before by digitization, It becomes 
possible for the broadcast (data broadcasting) by a character or data to also be attained, for 
example, to pass news as alphabetic data, or to distribute PC software by broadcast, and the 
system for providing such service is also appearing one after another. A receiving set and mobile 
type receiving sets, such as a Personal Digital Assistant which can be used not only a non- 
portable type like before but in movement, and a moving terminal currently installed by the car 
on the assumption that use in a car, have appeared. 

[0005]When realizing paid broadcasting service in such a system, broadcast contents must be 
enciphered, it must transmit and customer relations management adapted to a contract term and 
contractual coverage must be able to be performed, such as solving scramble based on contractual 
coverage. For example, the customer relations management adapted to a contract term makes a 
program possible at a contract channel [ within the contract term a contract of was made by the 
payment of the predetermined fee ]. 

[0006]Moreover (based on a contract channel and a contract term), it is necessary to certainly 
provide only a just televiewer with the key information for solving scramble or a code with a 
receiving set also from a viewpoint of preventing unjust viewing and listening. 
[0007]In order to realize this, conventionally, the contract information which showed the contract 
form including the channel information etc. in which the work key of the channel which prepares 
a master key and is carrying out the receiving contract to the televiewer who is doing the 
receiving contract and viewing and listening are possible was enciphered with the master key for 
every broadcast receiving set, and it had transmitted by the broadcast wave. A work key is a key 
peculiar to a channel, and can decode here the channel key of the channel concerned enciphered 
and sent. It is used for a channel key descrambling scramble (enciphered) contents (decoding). 
[0008]In such a restricted reception system, it can be said that the work key and contract 
information which are enciphered with a master key (set up for every receiving set) are limited 
reception information peculiar to a receiving set, and the channel key enciphered with the work 
key (it is common to two or more receiving sets) is common limited reception information. 
[0009]Even if it was peculiar limited reception information conventionally (it is unsuitable for 



transmitting characteristic data), it had transmitted by the broadcast wave, since this cannot 
acquire the information on whether not only monopolizing the transmission band superfluously 
since the information to an individual member is transmitted to all the members but the member 
received, either, it is required ~ period repeating transmission needed to be carried out. 
[0010]The work key contained in individual limited reception information is set to every contract 
term (usually one month), Since the contract-management center side did not know whether 
limited reception information must be individually sent from a broadcasting station for every 
period of the, and also the receiving set actually received, if fixed time repeating transmission 
was not carried out, it cut in ****. For this reason, the rate of the individual limited reception 
information occupied to the present limited reception information is large fairly. 
[001 l]In order to solve this problem, two-way communication functions, such as a telephone 
line, are given to a receiving set, and how to transmit the limited reception information according 
to each receiving set individual by a bidirectional circuit, and transmit common limited reception 
information, including a channel key etc., by a broadcast wave etc. can be considered. However, 
since the bidirectional circuit is not indispensable in the present broadcasting industry (reception 
of usually broadcast sake), it will become impossible to use the aforementioned method on 
condition of a bidirectional circuit to no members for the reason of some members not owning 
the bidirectional circuit for limited reception. When the cellular phone etc. which can be desorbed 
are used as a bidirectional circuit, there is a problem that it cannot transmit since it is not 
connected at the time of limited reception transmitting information (under situation of any kind). 
[00 12] On the other hand, when transmitting limited reception information by a bidirectional 
circuit, call origination of the receiving set is carried out from the contract-management center 
now. By carrying out call origination from a receiving set, this is for avoiding that the stage of 
call origination laps and a circuit gets confused. However, for this reason, call origination of the 
center side must always be carried out, and there is a problem that communication charges start. 
When using a cellular phone as a bidirectional circuit like a mobile receiving set, in order always 
to have to change a cellular phone into the state waiting for mail arrival, there is a problem that 
there are many amounts of consumption of a power supply (since there is no telling when call 
origination occurs from a center). 
[0013] 

[Problem(s) to be Solved by the Invention]Thus, if the information which should be distributed to 
each addressing to a member with the increase in a member increased and the conventional 
conditional access system carried out broadcast distribution of them, it had the problem that 
broadcast bands will be pressed. 

[0014]. Even though it distributes to each addressing to a member in two-way communication, 
such as a telephone network, a receiver does not have such a reception means. . Or a 
communication line cannot be connected when a receiver is power OFF. Or since it was 
necessary to perform call origination frequently, the burden of the communication charges of the 
transmitting side became large, or in a receiver, since it was necessary always to change into the 
state waiting for mail arrival, power consumption increased, and there was a problem of not being 
suitable for mobile environment. 

[0015]Then, an object of this invention is to provide the information distributing device and 
broadcast receiving set using the information distribution method and it which enable offer of the 
paid broadcasting service with high safety which can prevent unjust viewing and listening, 
without pressing broadcast bands in view of such the actual condition, even if members increase 
in number. 
[0016] 



[Means for Solving the Problem] An information distribution method and a device of this 
invention receive enciphered contents information by which broadcast distribution was carried 
out, Are a receiving set which decodes contents information which can be decoded, and for 
decoding of said contents information. As opposed to a receiving set which decodes said contents 
information by which broadcast distribution was carried out based on key information required in 
order to decode decoding control information including information peculiar to said required 
receiving set, and said contents information independent of said receiving set, Carry out 
broadcast distribution of said key information, and individual control information for updating a 
part or all of said decoding control information that is memorized by said receiving set is 
distributed by two-way communication with said receiving set, In that case, when receipt of said 
individual control information on this receiving set is not checked, broadcast distribution of this 
individual control information is carried out. 

[00 17] According to this invention, individual control information according to each receiving set 
individual is distributed for key information common to all the receiving sets by two-way 
communication, such as a telephone line, by broadcast, Offer of paid broadcasting service with 
high safety which can prevent still more unjust viewing and listening is enabled without pressing 
broadcast bands by distributing a lot of individual control information, even if members increase 
in number since broadcast distribution of this individual control information is carried out when 
receipt of this individual control information is not able to be checked. Since distributing 
individual control information by two-way communication, such as a telephone line, can also be 
distributed by a broadcast wave, Decoding control information stored in a receiving set when a 
change of a channel to which it views and listens etc. are made (at the time of renewal of a 
contract). When updating (for example, channel contract information, a work key, etc.), about a 
receiving set connected to a two-way communication circuit, individual control information is 
transmitted by positive two-way communication, and when not connected under a certain 
situation, individual control information can be transmitted by a broadcast wave. That is, 
individual control information can be certainly distributed to a member. 
[0018]By carrying out call origination of said receiving set, and distributing said individual 
control information by said two-way communication, after carrying out broadcast distribution of 
the command for changing said receiving set into a state waiting for mail arrival preferably, 
While being able to attain power-saving of a receiving set since the receiving set is changed into 
a state waiting for mail arrival only when distributing individual control information, individual 
control information can be distributed certainly and a paid broadcasting system suitable for 
mobile environment can be provided. 

[0019]By carrying out broadcast distribution of the command which directs call origination from 
said receiving set preferably in order to distribute said individual control information by said two- 
way communication, even if it is a case where it is alike by call origination from the receiving set 
side, and individual control information is distributed, By managing generating timing of call 
origination by the information distributing device side, a situation where a circuit is not 
connected easily and becomes an information distributing device is avoidable by, for example, 
concentrating on a time zone with call origination from a receiving set. 
[0020]preferably, after attesting said receiving set, even if it is a case where it is alike by call 
origination from the receiving set side, and individual control information is especially 
distributed by distributing said individual control information by two-way communication, 
distribution of individual control information is attained safely. 

[0021]There is the same effect as the above also by enciphering and carrying out broadcast 
distribution so that said key information can be decoded by other key information generated by 



said receiving set based on key creation information by which broadcast distribution is carried 
out. 

[0022]In a broadcast receiving set which a broadcast receiving set of this invention receives 
enciphered contents information by which broadcast distribution was carried out, and decodes 
contents information which should be decoded, A memory measure which memorizes decoding 
control information including information peculiar to a self-device required for said decoding of 
contents information by which broadcast distribution was carried out, Two-way communication 
distributes from the 1st distribution system that distributes individual control information for 
updating a part or all of decoding control information that was memorized by this memory 
measure, Or when two-way communication receives individual control information addressed to 
a self-device by the 1st reception means that receives individual control information addressed to 
a self-device by which broadcast distribution was carried out from said 1st distribution system, 
and this 1st reception means, A receipt transmitting means which transmits that receipt to said 1st 
distribution system, and an update means which updates decoding control information 
memorized by said memory measure based on individual control information received by this 1st 
reception means, The 2nd reception means that receives said key information by which broadcast 
distribution was carried out from the 2nd distribution system that distributes key information 
common to said all broadcast receiving sets required in order to decode said contents information, 
Said contents information by which broadcast distribution was carried out is decoded based on 
decoding control information memorized by said memory measure and key information received 
by said 2nd reception means. 

[0023] According to this invention, when each broadcast receiving set receives key information 
common to all the receiving sets by broadcast two-way communication, such as a telephone line, 
or when it carries out two-way communication and cannot receive, and it receives individual 
control information according to each receiving set individual by broadcast, Offer of paid 
broadcasting service with high safety which can prevent still more unjust viewing and listening is 
enabled without pressing broadcast bands by distributing a lot of individual control information, 
even if members increase in number. Since distributing individual control information by two- 
way communication, such as a telephone line, can also be distributed by a broadcast wave, 
Decoding control information stored in a receiving set when a change of a channel to which it 
views and listens etc. are made (at the time of renewal of a contract). When updating (for 
example, channel contract information, a work key, etc.), a receiving set connected to a two-way 
communication circuit receives individual control information by two-way communication, and 
when not connected under a certain situation, it can receive individual control information by a 
broadcast wave. That is, each receiving set can receive individual control information certainly. 
[0024]By changing a self-device into a state waiting for mail arrival so that a command by which 
broadcast distribution was carried out may be received preferably and said individual control 
information distributed from said 1st distribution system can be received, While being able to 
attain power-saving of a receiving set since what is necessary is just to change into a state waiting 
for mail arrival only when receiving individual control information, individual control 
information can be distributed certainly and a receiving set suitable for mobile environment can 
be provided. 

[0025]By carrying out call origination of said 1st distribution system, in order to receive 
preferably a command by which broadcast distribution was carried out and to receive said 
individual control information, even if it is a case where it is alike by call origination from the 
receiving set side, and individual control information is received, By managing generating timing 
of call origination by the distribution system side of ** 1st, a situation where a circuit is not 



connected easily and becomes a center (the 1 st distribution system) is avoidable by, for example, 
concentrating on a time zone with call origination from a receiving set. 
[0026]preferably, after a self-device is attested from said 1st distribution system, even if it is a 
case where it is alike by call origination from the receiving set side, and individual control 
information is especially received by receiving said individual control information, distribution of 
individual control information is attained safely. 

[0027]There is the same effect as the above also by enciphering that said key information can be 
decoded by other key information generated based on key creation information received 
separately. 
[0028] 

[Embodiment of the Invention]Hereafter, the embodiment of this invention is described with 
reference to drawings. 

[0029]First, a definition of term is performed. It names generically permitting viewing and 
listening of broadcast contents only to the limited person (it is hereafter called a regular 
contractor, a member, or a user) who gave encryption etc. and performed predetermined contract 
/ subscription procedure etc. when receiving the broadcast contents which consist of one or more 
channels, and it is called limited reception. The system which realizes limited reception is named 
generically and it is called a conditional access system. This embodiment explains taking the case 
of the conditional access system for paid broadcasting service, for example. 
[0030]In order to perform limited reception, the information which described the contract 
condition for every channel for every member is called channel contract information. For 
example, the bit string which attached the channel designator to each channel and expressed the 
contract condition of the channel by whether the bit corresponding to a channel designator is " 1 " 
like drawing 2 is channel contract information. Drawing 2 shows that a contract of the 2nd, the 
5th, the 7th, and the 8th channel is made. 

[003 1] As shown in drawing 6 , the information which adds restriction to channel contract 
information, such as the term of validity of the channel contract information concerned, and the 
information which expresses a member's contract form in details more are added to the channel 
contract information shown in drawing 2 , and channel contract information may be constituted. 
[0032]Each subscriber to the paid broadcasting service concerning this embodiment differs in 
contractual coverage (a channel to view and listen, the period to which it views and listens), 
respectively. That is, in order to make possible limited reception to the broadcast receiving set 
which these members possess, it is necessary to distribute individually the control information on 
the broadcast receiving set concerned based on different contractual coverage (utilization 
condition) for every member. Such control information is called individual control information. 
Since individual control information is distributed by packet format, it is also called an individual 
control packet in that case. EMM [ in / for example / in this individual control packet / the present 
CS broadcasting standard ] (Entitlement Management Message), It hits EMM-S (Entitlement 
Management Message for S-band) (reference "BS-digital-broadcasting restricted reception 
system standards ARIB STD-B25 (Association of Radio Industries and Businesses)"). 
[0033]Broadcast contents information (it may be hereafter called contents simply) is enciphered 
by the "channel key" at different key information for every channel, i.e., here. Therefore, in order 
to view and listen to the contents of a desired channel (it contracted) with the broadcast receiving 
set which each member possesses, it is necessary to also distribute control information common 
to all the members (all the broadcast receiving sets which a member possesses) like the key 
information depending on this contents information. Such control information is called common 
control information. Since common control information is also distributed by packet format, it is 



also called a common control packet in that case. ECM [ in / for example / in this common 
control packet / the present CS broadcasting standard ] (Entitlement Control Message), It hits 
ECM-S (Entitlement Control Message for S-band) (reference "BS-digital-broadcasting restricted 
reception system standards ARIB STD-B25 (Association of Radio Industries and Businesses)".). 
[0034]When the broadcast receiving set which each member possesses receives individual 
control information and common control information certainly, viewing and listening of contents 
information in alignment with each member's contractual coverage is attained. 
[0035]The composition (mainly hardware) which realizes the limited reception method inside a 
receiving set is called a limited reception part or limited reception chip through following 
embodiments. Since the confidential information for limited reception was contained in the 
limited reception chip, it read easily from the exterior about an internal memory and hard 
structure, and the Tampa-proof structure which cannot perform writing and change is assumed. 
The television television machine for actually reproducing contents information decoded by this 
set top box in the set top box concerned, such as a sound and an image, radio, etc. may be 
connected by making a limited reception part into a set top box, and a broadcast receiving set 
may be constituted as a whole. 

[0036]In the following explanation, it may call it descrambling to decode the enciphered contents 
information using a channel key. 

[0037]The conditional access system explained by following embodiments, It mainly comprises a 
broadcast receiving set which a service subscriber possesses, and an information distributing 
device (contract-management device) as a contract-management center (it may be simply called a 
center) which distributes individual control information, common control information, encrypted 
contents information, etc. to this broadcast receiving set. 

[003 8] (A 1st embodiment) A 1st embodiment of this invention is an embodiment in the 
conditional access system which has a master key with each individual receiving set. Since such a 
conditional access system must encipher the control information which includes channel contract 
information etc. periodically and individually and must transmit, it has the problem that a 
transmission amount becomes large. On the other hand, since safety is high, it has been adopted 
by CS broadcasting and others from the former that the damage range at the time of a master key 
being torn is narrow etc. However, the quantity of the control information which should be sent 
according to a receiving set individual is becoming huge with the increase in a member in recent 
years, and this embodiment gives this solution. 

[0039]In such a conditional access system, key composition as shown in drawing 3 is adopted, 
for example. That is, the work key Kw common to all the receiving sets defined for every channel 
is enciphered with the master key KM according to each receiving set individual, and it transmits. 
Using the work key Kw, the channel key Kch is enciphered and it transmits. Since broadcast 
contents are enciphered with the conventional encryption system using the channel key Kch, it 
can decode by this channel key. A channel key must usually be changed in a short time for about 
10 minutes here in order to prevent a decipherment. A transmission amount becomes huge, if the 
individual master key was used in order to transmit this. Therefore, it is necessary to use a work 
key common to all the receiving sets. Since a work key is also dangerous if the same key is used 
in the unit of how many months, it is necessary to change and it serves as structure which 
enciphers this with an individual master key. Even if a metaphor master key is known by this, by 
it, free viewing and listening can be prevented by changing a work key. 

[0040]Now, the data which the broadcast receiving set used for the conditional access system of a 
1st embodiment receives from a broadcast wave is three kinds, a contents packet, a common 
control packet, and an individual control packet. 



[0041]The contents packet consists of an information identifier, a channel identifier, a channel 
key identifier, and broadcast (enciphered) contents by which scramble was carried out by the 
packet format shown in drawing 4 . An information identifier describes the identifier which shows 
the classification of the packet concerned and shows that it is a contents packet here. As for a 
channel identifier, the broadcast contents concerned show of which channel they are contents. A 
channel key identifier shows the identifier of the channel key which decodes the broadcast 
contents concerned. Broadcast contents are raw program data and are enciphered by the channel 
key Kch specified by the channel key identifier. All the information (data) described by this 
embodiment shall be expressed by fixed length. 

[0042]By the packet format which the common control packet explained here is a common 
control packet for channel key distribution, and is shown in drawing 8 . An information identifier, 
a work key identifier, a channel identifier, a channel key identifier (1), It comprises a channel key 
(1), a channel key identifier (2), and a channel key (2), and the portion from a channel identifier 
to a channel key (2) is enciphered with the work key shown by the work key identifier. An 
information identifier describes the identifier which shows the classification of the packet 
concerned and shows that it is a common control packet (common control packet for channel key 
distribution) here. As for a channel identifier, the common control packet concerned shows which 
channel thing it is. A work key identifier is information which shows by which work key Kw the 
common control packet concerned is enciphered. A channel key identifier is an identifier of the 
channel key described below, and the channel key shows the channel key currently used for 
encryption of the broadcast contents of the channel specified by the channel identifier. 
[0043]It is because a channel key is changed comparatively for a short time, so that a channel key 
identifier and 2 sets of channel keys exist has sent simultaneously the channel key used from the 
necessity of changing a channel key smoothly now, and the channel key used next time as 
mentioned above here. Of course, since direct influence is not carried out to this invention, it may 
be 1 set that 2 sets transmits in this way. 

[0044]two kinds in the case of the case where individual control information is distributed via a 
modem in this embodiment from the two-way communication circuit which used the public 
network (telephone network) etc., and a broadcast wave distributing -- it is . Anyway, although 
individual control information as well as common control information is transmitted by packet 
format and there is no change in things, the form has a difference a little. 
[0045]The individual control packet transmitted by a two-way communication circuit is an 
individual control packet for contract information distribution of composition as shown in 
drawing 7 (a), and consists of an information identifier, a master key identifier, and enciphered 
contract information. An information identifier shows the classification of the packet concerned 
and describes here the identifier which shows that it is an individual control packet for contract 
information distribution. A master key identifier is the identification information of the master 
key which can decode the individual control packet concerned, and if transmitted and received 
correctly, the master key identifier which the receiving set which should receive the packet 
concerned has is described here. 

[0046]The individual control packet by which broadcast distribution is carried out is same 
individual control packet for contract information distribution, and as shown in drawing 7 (b), it 
differs from the individual control packet (refer to drawing 7 (a)) to which the point that 
receiving set ID is added to an unenciphered portion is transmitted by two-way communication. 
This receiving set ID is the information which shows of which addressing to a receiving set the 
individual control packet concerned is a thing, and since it differs in a master key (this packet is 
decoded) the whole receiving set, it is indispensable information. 



[0047] As shown in drawing 5 , it is contract information from the pair of several n and n work 
keys of receiving set ID, channel contract information, and a work key, and a work key identifier, 
and the digital signature. Receiving set ID is an identifier of a receiving set which should receive 
the contract information concerned, and if it is transmitted and received normally, it is receiving 
set ID in the limited reception part 100 inside a receiving set, and congruous ID. Channel contract 
information shows the channel which can receive the receiving set which has the receiving set ID 
concerned, and as shown in drawing 6 , it consists of channel contract information and its term of 
validity here, for example. Work key identifier (i) is an identifier of continuing work key (i). 
Since the work key is set up for every channel in this embodiment, the group of the work key 
corresponding to channel contract information and a work key identifier enters. A digital 
signature is the information for checking the justification of the contract information (especially 
channel contract information) concerned, and is mainly used for forgery prevention. 
[0048]By a 1st embodiment, since all these information is the data expressed by fixed length, the 
algorithm which extracts each information from the received packet is not described anew. 
[0049]Next, the composition and processing operation of the broadcast receiving set (it may be 
hereafter called a receiving set simply) concerning a 1st embodiment are explained. Drawing 1 is 
what showed the example of composition of the important section of a broadcast receiving set, 
and it explains first the individual control packet reception operation by the two-way 
communication shown in drawing 9 , referring to drawing 1 . 

[0050]The broadcast receiving set of drawing 1 is answering to the call origination from a center 
via the modem section 101, and the session for transmitting and receiving an individual control 
packet via the two-way communication circuit is established (Step SI). When an individual 
control packet as shown in drawing 7 (a) is received and the packet concerned recognizes that it 
is for contract information distribution from the information identifier, the transmission and 
reception section 102 passes it to the individual control information decoding part 104, and here, 
A master key identifier is acquired from the packet concerned (Step S2, Step S3). If the acquired 
master key identifier is not a master key identifier corresponding to the master key stored in the 
master key storing part 103, an error will be transmitted to a center using the session established 
(Step S3, Step S10). When it is the corresponding master key identifier (Step S3), the contract 
information included in the packet which received is decoded using the master key concerned 
outputted from the master key storing part 103 (step S4) (Step S5). 

[0051]The work key contained in the decoded contract information and its identifier are stored in 
the work key storage 105 (Step SI 1). Receiving set ID contained in the contract information 
concerned is compared with receiving set ID stored in the receiving set ID storage 106, and if not 
in agreement, an error is outputted to a center via the transmission and reception section 102 
(Step S6, Step S12). If in agreement, the key information stored in the digital signature 
verification-keys storage 108 by the contract information authentication section 107 will be used 
(for example, channel contract information.). Or portions other than a digital signature are 
enciphered by the key information concerned among the contract information shown in drawing 
5, If the digital signature of the contract information concerned is verified (Step S7) and 
verification is not successful by comparing the result and the digital signature in contract 
information, the error reply of that is carried out to a center via the transmission and reception 
section 102 (Step SI 3). 

[0052]If verification is successful, after storing channel contract information in the contract 
information storage 121 (Step S8), the acknowledgment of receipt which shows that the renewal 
of contract information carried out normal termination is transmitted to a center, and it ends (step 
S9). 



[0053]Here explains the verification processing of the digital signature in the contract 
information authentication section 107. A digital signature here is roughly divided and is 
considered two. Then one used the common key encryptosystem, it is a method which exists, has 
a center, a cryptographic algorithm common to a receiving set, and a common secret key, 
enciphers contract information sequentially by a block unit with the secret key of this **, and 
makes the last block a digital signature. Successive encryption is a method of encryption with 
which a pre- block affects encryption of the present block here. For example, the present block is 
enciphered with a secret key and it can realize by considering it as the encryption result of the 
present block with the exclusive OR of the encryption result and the encryption result of a pre- 
block. Even when this method was used and an intermediate block is altered, since a different (in 
the cases of most) digital signature is generated, it becomes alteration detection. 
[0054]Always the ability to perform signature verification by a common key encryptosystem at 
high speed To a digital signature, the characteristic quantity of the whole data called a hash value 
besides said technique to sign is calculated, and the technique of enciphering the value is known 
again. A hash value is calculated from the whole data, and when at least 1 bit of data is changed, 
there is the feature that it is difficult to create data with that hash values differ remarkably and the 
same hash value. Alteration detection is attained for such character. A hash value is created by a 
hash function with fixed length data. 

[005 5] Although it does not come out, and circuit structure is small and ends, since a receiving set 
has the same information as a center, there is the feature that it is weak in hacking etc. 
[0056]Another is the method which used public key encryption, and verifies by a public key what 
signed with the secret key. Since it is very difficult here to derive a secret key from a public key, 
even if a receiving set is hacked and it extracts a public key, it is the feature for an alteration to be 
fairly difficult. Although it is a method with very high safety, there is also a weak point where it 
being not only a low speed but circuit structure becomes large. 

[0057]With the character which was excellent in such a digital signature, it can be said that the 
receiving set is carrying out information distributing device (leading digital signature added to 
individual control packet) (it is also called contract-management device) attestation. However, a 
digital signature is not indispensable in order to solve the problem considered by this invention. 
That is, this invention can be carried out that a digital signature is not indispensable in the 
individual control packet of this invention, and the composition excluding the digital signature 
from the individual control packet does not have inconsistency, either. 
[0058]Next, with reference to the flow chart shown in drawing 10 - drawing 14 , the broadcast 
receiving set of drawing 1 explains the processing operation which receives common control 
information, contents information, and common control information from a broadcast wave. If a 
receiving set receives the broadcast wave sent from the center in the broadcast receive section 
1 1 1 and an electrical signal is acquired (Step S21), it will change it into a digital signal from an 
analog signal in the AID conversion part 1 12, and will change it into packet format digital data 
(Step S22, Step S23). After being sent to error detection / correction part 113 and performing 
predetermined error detection/correction (Step S24), digital data distinguishes individual control 
a contents packet, a common control packet, or a packet with reference to the information 
identifier of the receive packet concerned, branches according to it, and advances processing. 
[0059]By the way, the channel identifier which the channel selection interface (I/F) 115 acquires 
the channel identifier under present viewing and listening, and was acquired here is passed to the 
channel selection part 1 14 and the channel information input part 123 (Step S51 - Step S53 of 
drawing 12) . 

[0060] When it is a contents packet, channel I/Fl 15 is passed for (Step S25), the channel selection 



part 114 passes the channel under present viewing and listening, it obtains and only the contents 
packet of a viewing-and-listening channel is passed to the filter part 1 16 of the limited reception 
part 100 based on this (Step S28). In the filter part 1 16, this is sent to the descrambling part 120 
(StepS29). 

[0061] On the other hand, when it is a common control packet, through (Step S26) and the 
channel selection part 1 14, it is sent to the common-control-information decoding part 1 17 by the 
filter part 116, and decoding is started (Step S41). 

[0062]Next, the processing to a contents packet is explained in detail along with the flow chart of 
drawing 11 . A channel identifier, a channel key identifier, and ** are separated from the contents 
packet sent to the descrambling part 120 at Step S29 of drawing 10, and they are passed to the 
channel key outputting part 119. The output of a channel key is demanded from the channel key 
outputting part 119 from the descrambling part 120. 

[0063]The channel key outputting part 119 extracts the channel key of the reception channel 
under present viewing and listening from the channel key storage 1 1 8 based on the contract 
judging to the channel identifier concerned in the contract judgment part 112. Namely, as shown 
in drawing 12 , the contract judgment part 122, Acquire the channel identifier of the channel to 
which it is viewed and listened now from the channel information input part 123 (Step S54), and 
channel contract information as shown in drawing 2 already memorized by the contract 
information storage 121 is referred to, If the bit corresponding to the acquired channel identifier 
is "1" and it is "permission" and "0", the signal of "disapproval" will be sent to the channel key 
outputting part 119 (Step S55). If the sent decision result is "permission" in the channel key 
outputting part 119, the channel key which has the channel key identifier taken out from the 
contents packet from the channel key storage 118 will be obtained from the channel key storage 
118, The descrambling part 120 is passed (Step S57). If a decision result is "disapproval", the 
processing about the contents packet concerned will be ended there. 

[0064]The descrambling part 120 will decode and output the enciphered contents information 
which is included in a contents packet using it, if a channel key is received from the channel key 
outputting part 1 19 (Step S31 - Step S33 of drawing 11) . 

[0065]Next, the processing to a common control packet is explained with reference to the flow 
chart shown in drawing 13 . A common control packet is sent to the common-control-information 
decoding part 117 from the filter part 116 (Step S41 of drawing 10) . Here, a work key is acquired 
from the work key storage 105 based on the work key identifier contained in the non-cryptopart 
of a common control packet (Step S42 of drawing 13 ). Processing is ended when a work key is 
not able to be acquired. If a work key is acquirable, the encryption section of a common control 
packet is decoded with the work key concerned (Step S44). The channel key Kch is acquired 
from the encryption section of the decoded common control packet, and it stores in the channel 
key storage 1 1 8 (Step S45). 

[0066]Next, the processing to an individual control packet is explained with reference to the flow 
chart shown in drawing 14 . An individual control packet is sent to the individual control 
information decoding part 104 from the filter part 116 (Step S61 of drawing 10) . Here, receiving 
set ID is extracted from an individual control packet (non-encryption section), and it compares 
with receiving set ID of the self-device stored in the receiving set ID storage 106 (Step S62 of 
drawing 14) . When extracted receiving set ID is not in agreement with it of a self-device, 
processing of this packet is ended. When in agreement, the master key identifier taken out from 
the receive packet (non-encryption section) concerned is used as a key, and a master key is 
acquired from the master key storing part 103. A work key and its identifier are taken out from 
the contract information (refer to drawing 5) which decoded the contract information in the 



individual control packet concerned using the master key concerned (Step S63), and was acquired 
by decoding, and it stores in the work key storage 105 (Step S64). 

[0067]Next, the decoded contract information is sent to the contract information authentication 
section 107. In the contract authentication section 107, since portions other than the digital 
signature of this contract information are stored in the digital signature verification-keys storage 
108, encipher using digital signature verification keys and a digital signature is acquired, A 
digital signature is verified based on whether to be in agreement with the digital signature in the 
contract information concerned (Step S65). When verification is successful, the channel contract 
information in contract information is stored in the contract information storage 121, and 
processing is finished (Step S66). It ends without storing, since channel contract information may 
have been forged or it may have been destroyed by receiving [ poor ], when verification went 
wrong. 

[0068] Since it is receivable by both the case where two-way communication, such as a telephone 
line, receives individual control information, and the case where what was distributed by the 
broadcast wave is received according to the broadcast receiving set concerning a 1st embodiment 
of the above as explained above, When a change of the channel to which it views and listens etc. 
are made (at the time of renewal of a contract) and the channel contract information etc. which 
are stored in the receiving set are updated, About the receiving set connected to the two-way 
communication circuit, an individual control packet is transmitted by positive two-way 
communication, and when not connected under a certain situation, an individual control packet 
can be transmitted by a broadcast wave. 

[0069] Although a 1st embodiment showed only the composition of the broadcast receiving set 
(the information distributing device concerning a 1st embodiment) By distributing individual 
control information which is explained by a 5th embodiment and which was mentioned above by 
both two-way communication and broadcast, For example, even if it is a broadcast (it does not 
have modem section [ of drawing 1 ] 101, and transmission and reception section 102) receiving 
set without two-way communication functions, such as a cellular phone, renewal of channel 
contract information can be ensured. 

[0070](A 2nd embodiment), next some variations are described. The 1st variation precedes 
transmitting individual control information using a two-way communication circuit from a center, 
and transmits the command which makes one the power supply of the two-way communication 
function (for example, portable telephone function) by the side of a receiving set by a broadcast 
wave. 

[0071]By doing in this way, it becomes unnecessary to always change the receiving set side into 
a power turn state (mail arrival waiting state) for the individual control information which is not 
understood when it receives a message, and it can realize power saving. In the mobile 
environment which uses a cell as the main power supplies, realization of such power saving is 
important. 

[0072] Although the composition of the important section of the broadcast receiving set 
concerning a 2nd embodiment is shown in drawing 15 , In drawing; 15 , although it corresponds 
after the transmission and reception section 102 and the modem section 101, since this invention 
has the feature in a limited reception part, the detailed composition and its explanation of a two- 
way communication function part are omitted, and only the composition concerning the operation 
which performs the power turn/OFF control of the function is explained to be a two-way 
communication function. For example, a cellular phone can be connected to the transmission and 
reception section 102 using a predetermined connecting cable, and a two-way communication 
function part can also be constituted. 



[0073 ]In drawing 15, the formation part about the reception of the individual control packet 
which transmits by a broadcast wave differs from a 1st embodiment. Since the receiving 
procedure of a common control packet is the same as a 1st embodiment, below, it actually stops 
to explain only the composition and reception operation of a different point, i.e., the individual 
control packet which receives from a broadcast wave. 

[0074]In a 2nd embodiment, the individual control packet received by a broadcast wave is two 
kinds such as the thing for contract information distribution, and the thing for command 
distribution. Since the individual control packet for contract information distribution is the same 
as the thing (refer to drawing 7 (b)) of a 1st embodiment, here explains only the individual 
control packet for command distribution (it may be hereafter called a command packet). 
[0075]The command packet consists of an information identifier and a command main part, as 
shown in drawing; 16 . As a command main part is roughly divided and it is shown in drawing 17 , 
only in the command identifier, the number, and the number of receiving set ID of receiving set 
ID, receiving set ID is located in a line, and a digital signature continues after that. A digital 
signature is attached to the number of receiving set ID, and the row of receiving set ID for 
forgery prevention. A command identifier here is a command identifier for identifying always 
that it is a "power turn" command for starting supply of the power supply to the two-way 
communication function of the broadcast receiving set for changing into (the state waiting for 
mail arrival) in the state in which receipt is possible. Hereafter, the command packet which 
distributes a "power turn" command is called a power turn command packet. 
[0076] Drawing 18 is a flow chart for explaining reception operation of the individual control 
packet by the broadcast wave of the broadcast receiving set shown in drawing 15 . Hereafter, 
based on drawing 15 , the flow of processing is explained along with drawing 18 . 
[0077]First, a packet is passed to the individual control information decoding part 104 from the 
filter part 116. With reference to the information identifier of the packet concerned, when the 
packet concerned is an individual control packet for contract information distribution, the same 
processing as the case (refer to drawing 14) of a 1st embodiment is performed (Step S71 - Step 
S76). 

[0078]In the individual control information decoding part 104, when the packet concerned is a 
command packet, with reference to the command identifier in a packet, it is confirmed whether 
the packet concerned is a power turn command packet (Step S77). Processing will be ended if the 
packet concerned is not a power turn command packet. 

[0079]When it is a power turn command packet, receiving set ID of the self-device stored in the 
receiving set ID storage 106 and every one receiving set ID in the packet concerned are compared 
(Step S78). Processing is ended when receiving set ID of the self-device is not contained in the 
packet here. When contained, the packet concerned is sent to the individual control information 
authentication section 107. 

[0080]In the individual control information authentication section 107, verification keys are 
acquired from the digital signature verification-keys storage 108, and a digital signature is 
verified (Step S79). End processing, when verification of a digital signature goes wrong, and 
when it succeeds, the signal of the purport (a power turn is used) that the electric power supply to 
the function part concerning the two-way communication function of the modem section 101 and 
transmission and reception section 102 grade is started is sent to the power-supply-management 
department 125, In response to it, the power-supply-management department 125 starts supply of 
the electric power to these function parts, and changes it into the state waiting for mail arrival 
always (Step S80). 

[0081] Since a two-way communication function will be in the state waiting for mail arrival at 



Step S80, the broadcast receiving set can receive the individual control packet for contract 
information distribution via a two-way communication circuit in a procedure as shown in 
drawing 9 after that. 

[0082]Although the power supply said here means the standby power supply (electric power) for 
the waiting for the arrival of a two-way communication circuit, depending on composition, the 
power turn (or OFF) of other formation parts becomes possible by the command packet 
concerned. Even if the power-supply-management department 125 does not receive the power 
supply turned on by this embodiment after receiving the individual control packet for contract 
information distribution via a two-way communication circuit or, it is desirable to turn off after 
fixed time. 

[0083]Thus, by dividing an individual control packet into a broadcast wave and communication, 
and transmitting, an effective conditional access system can consist of meanings of zone 
reduction and power saving. Explanation of the 1st variation is finished above. 
[0084](A 3rd embodiment) The 2nd variation of a 1st embodiment is explained. In order to 
transmit individual control information using a two-way communication circuit from a center, it 
is a variation about the method which performs call origination from the broadcast receiving set 
side. Since call origination is not uniformly distributed if call origination is performed from the 
receiving set side, it may be unreceivable by the center side system. This embodiment tends to 
solve this problem. In this embodiment, a means by which the receiving set which is carrying out 
call origination attests whether it is a just thing is formed. Although attestation is not necessarily 
required for the purpose of making call origination uniform, if unlike the 1st - center call 
origination like a 2nd embodiment the justification of a receiving set cannot attest easily in the 
case of receiving set call origination and it does not have an authentication means, it will be hard 
to maintain safety. 

[0085]The composition of the important section of the broadcast receiving set concerning a 3rd 
embodiment is shown in drawing 19 . In drawing 19 , it differs from the case where the processing 
operation which receives the individual control packet distributed by a broadcast wave is a 1st 
embodiment. Therefore, below, only the composition and reception operation of the individual 
control packet which receives from a broadcast wave are stopped to explain. 
[0086]In a 3rd embodiment, the individual control packet received by a broadcast wave is two 
kinds, the object for contract information distribution, and the object for command distribution 
(command packet), like a 2nd embodiment. Although the data configuration of the individual 
control packet for contract information distribution is the same as that of what was explained by a 
1st embodiment (refer to drawing 7 (b)) and the composition of a command packet is the same as 
that of what was explained by a 2nd embodiment (refer to drawing 16 and drawing 17) , 
According to this embodiment, the points that a command identifier directs the call origination to 
a center to a broadcast receiving set and of being an identifier of a command differ. Hereafter, 
such a command is called a call origination command and the packet is called a call origination 
command packet. 

[0087] Drawing 20 is a flow chart for explaining reception operation of the individual control 
packet by the broadcast wave of the broadcast receiving set of drawing 19 , and, below, explains 
the flow of processing along with drawing 20 based on drawing 19 . 
[0088]First, the individual control packet received by the broadcast wave is passed to the 
individual control information decoding part 104 from the filter part 116. With reference to the 
information identifier of the packet concerned, the packet concerned performs the same 
processing (refer to drawing 14) as a 1st embodiment, when it is a packet for contract information 
distribution (Step S91 - Step S96). 



[0089]When the packet concerned is a command packet, with reference to the command 
identifier in a packet, it is confirmed whether the packet concerned is a call origination command 
packet (Step S97). Processing will be ended if the packet concerned is not a call origination 
command packet. 

[0090]When it is a call origination command packet, receiving set ID of the self-device stored in 
the receiving set ID storage 106 and every one receiving set ID in the packet concerned are 
compared (Step S98). Processing is ended when receiving set ID of the self-device is not 
contained in the packet here. When contained, the packet concerned is sent to the individual 
control information authentication section 107. 

[0091]In the individual control information authentication section 107, verification keys are 
acquired from the digital signature verification-keys storage 108, and a digital signature is 
attested (Step S99). When verification of a digital signature goes wrong, processing is ended, 
when it succeeds, the signal of the purport that the call origination to a center is directed in the 
center call origination part 162 is sent, and the center call origination part 162 performs call 
origination to a center through the communications department 152 between centers, and the 
modem section 101 (Step SI 00). 

[0092]Thus, in the conditional access system which transmits an individual control packet using 
both a broadcast wave and two-way communication, By pointing to the call origination from a 
receiving set from the center side, making it perform, and managing the generating timing of call 
origination by the center side, when connecting the two-way communication circuit between 
centers with the receiving set concerned by the call origination from the receiving set side, For 
example, the situation where a circuit is not connected easily and becomes a center is avoidable 
by concentrating on a time zone with the call origination from a receiving set. 
[0093]Next, processing operation is explained after a broadcast receiving set performs call 
origination to a center until it receives an individual control packet. The packet transmitted and 
received by the two-way communication between a center and a broadcast receiving set consists 
of an information identifier and an information body, as shown in drawing 21 . It can classify into 
three packets according to the difference in this information body. Here, there are an individual 
control packet shown in drawing 7 (a), same packet (hereafter, in order to distinguish two kinds 
of other packets, it is dared to call this packet an individual control packet), a challenge packet, 
and a response packet, for example. 

[0094]The individual control packet consists of an information identifier, a master key identifier, 
and enciphered contract information, as shown in drawing 22 . Contract information is the same 
as that of drawing 5 here. It consists of an information identifier, and the challenge number and 
challenge information body for identifying that a challenge packet is a challenge packet as shown 
in drawing 23 , and a challenge number is the question from a center to a receiving set and the 
management number in question which are called a challenge. The challenges currently assumed 
by this embodiment are the challenge which asks receiving set ID, the challenge which asks a 
master key identifier, and a challenge which creates a signature with a secret key (it is peculiar to 
each receiving set) to challenge information. In addition, the challenge etc. which make the 
enciphered challenge information decode with a secret key and to which the response of the 
decoding result is carried out are considered. Like the challenge made to sign with a secret key 
here, when object data is required, it is described to a challenge information body and it 
transmits. 

[0095]It is in asking a question that it cannot be answered that the foundations of a challenge and 
response do not use the information which cannot know only a broadcast receiving set and a 
center, and checking that it is were able to reply to the question correctly, and the broadcast 



receiving set concerned is a just (it registers with the center) device. 

[0096]It is an information identifier for identifying that a response packet is a response packet as 
shown in drawing 24 from the challenge number, the challenge information body, and the 
response information body. Suppose that form has also become the response information body 
settled by the challenge number (to a challenge information body and the appearance). 
[0097j Drawing 25 is the flow chart which showed the processing operation after a receiving set 
receives a call origination command, and explains the flow of processing along with drawing 25 
hereafter based on drawing 19 . First, if call origination is performed from a receiving set to a 
center (Step SI 01) and a two-way communication circuit is connected with a receiving set 
between centers, an individual control packet will be transmitted from a center. The center 
communication analyzing parts 151 of a receiving set receive an individual control packet via the 
connected two-way communication circuit concerned, the modem section 101, and the 
communications department 152 between centers (Step SI 02). The packet which received is 
passed to the center communication analyzing parts 151, and discriminates here of which 
classification it is a packet from the information identifier of the packet. 
[0098]The center communication analyzing parts 151 pass it to the response preparing part 152, 
when the packet concerned which received is a challenge packet (Step SI 03) (Step SI 06). When 
it is an individual control packet for contract information distribution, (Step SI 04) and the 
individual control information decoding part 104 are passed (Step SI 07), and the same 
processing (Step S3 of drawing 9 - step S9) as a 1st embodiment performs attestation and the 
storing process of contract information (Step SI 08). the packet which received ~ the above - 
when it is not any, either, it transmits to a center via a two-way communication circuit as an error 
(Step SI 05). 

[0099]Next, creation and transmitting processing operation of a response packet are explained 
along with the flow chart shown in drawing 26 . The response preparing part 152 checks the 
classification of a challenge with reference to the challenge number in a challenge packet. When 
it is the challenge which receiving set ID asks, (Step Sill), Receiving set ID is taken out from 
the receiving set ID storage 106 (Step SI 15), a response packet as changed receiving set ID into 
the response information form defined beforehand and shown in drawing 23 is created (Step 
SI 16), and it transmits to a center (Step SI 17). When it is the challenge which asks a master key 
identifier (Step SI 12), a master key identifier is acquired from the master storage 103, a response 
packet is created like the above-mentioned, and it transmits to a center (Step SI 18 - Step SI 20). 
[0100]It acquires out of the packet which received (Step SI 13) and the challenge information 
body which is data which should sign when it was the challenge of signature creation (Step 
S121), A secret key is acquired from the secret key storing part 153, and the signature to a 
challenge (Step S122) information body is created (Step SI 23). The created signature is changed 
into the form of a response information body according to the form defined beforehand, and is 
transmitted to a center in the form of a response packet as shown in drawing 24 (Step SI 24 - Step 
SI 25). When the transmitted challenge information is not applied to which [ the three above- 
mentioned kinds of ], an error is transmitted to a center (Step SI 14). 

[0101]After the center side checks the justification of the receiving set concerned by the above 
processing from the response packet which received, the individual control packet can be 
transmitted. In (a 1st embodiment described) and this embodiment, it can be said that the 
receiving set recognizes the information distributing device (center) side by the digital signature 
given to the individual control packet. For this reason, it is also possible to think that mutual 
recognition is performed by this embodiment between a receiving set and a center. However, as a 
1st embodiment also described, such a gestalt is not indispensable in this invention, and is 



essential. [ of the embodiment the center side recognizes a receiving set to be like this invention ] 
[0102]Explanation of the 2nd variation is finished above. 

[0103]In the conditional access system which can perform call origination for the individual 
control packet transmission by two-way communication by a receiving set and center Aikata, a 
restricted reception system which fills a 2nd and 3rd embodiment simultaneously is also feasible. 
Since both variations only differ in the kind (command identifier) of command (from the 
composition) and have a mutually-independent relation, it is both because it is possible to carry 
out simultaneously. In this meaning, a 1st and 2nd embodiment is broadcast about the command 
packet according to each receiving set individual, and can realize the individual control packet for 
contract information distribution to be an embodiment which transmits by two-way 
communication. 

[01 04] Although main processings are performed only in the limited reception part 100 in an 
above embodiment, there is also a view of mounting only the descrambling part 120 on the 
outside of a limited reception chip. The descrambling part 120 needs high speed processing, in 
order to have to decode in real time (since broadcast contents are decoded). However, since the 
other portions must not always operate and processing time moreover has some margins, when it 
does in this way on mounting, there are many advantageous things. When attaining 
communalization of a receiving set with other broadcasts, the scrambling system of broadcast 
contents is held in common by all the broadcasts, and the mounting method which mounts only 
the limited reception (I would like to hold confidential information by each broadcast) part 100 
on the media in which desorption, such as an IC card, is possible can be considered. In the 
embodiment described above and the embodiment to be described from now on, it is added that 
the above mounting is also possible. 

[0105](A 4th embodiment) A 4th embodiment is a case of the conditional access system which 
has a master key with all the common broadcast receiving sets. Since the master key is common 
to all the broadcast receiving sets and the master key (it is common to all the receiving sets) has 
played the role of the work key in a 1st embodiment, the conditional access system in a 4th 
embodiment has easy key composition in which a work key does not exist, as shown in drawing 
28. Since such a conditional access system has simple composition, it is very useful in respect of 
transmission amount reduction of individual control information (refer to JP,1 1-243536,A). 
(when premised on transmission by a broadcast wave) However, since the master key is common 
and the channel key of all the channels will be received equally to every broadcast receiving set, 
in order to realize limited reception, it will be dependent only on channel contract information. 
[0106]The composition of the important section of the broadcast receiving set concerning a 4th 
embodiment is shown in drawing 27 . In a 4th embodiment, an individual control packet as shown 
in drawing 7 is used like the case of a 1st embodiment. However, since a work key does not exist 
in a 4th embodiment, contract information has the composition which consists of receiving set ID 
and channel contract information as shown in drawing 29 , and a digital signature. As for a 
common control packet, two kinds, the common control packet for master key creation 
information distribution (refer to drawing 30 (a)) and the common control packet for channel key 
distribution (refer to drawing 30 (b)), are used. 

[0107]The common control packet for channel key distribution is the same as that of the case 
(refer to drawing 8 ) of a 1st embodiment. The common control packet for master key creation 
information distribution consists of an information identifier, a master key identifier, master key 
creation information, and a digital signature, as shown in drawing 30 (a). 

[0108]Here, an information identifier is the information which shows that the packet concerned is 
a common control packet for master key creation information distribution, and it is used in order 



to distinguish from other packets. A master key identifier is an identifier of the master key 
generated from the continuing master key creation information. A digital signature is for 
preventing forgery of the master key creation information concerned, has what is depended on a 
secret key cryptosystem like the digital signature used by a 1st embodiment, and a thing to 
depend on public key encryption, and may use whichever. 

[0109]Next, the composition and processing operation of the broadcast receiving set of drawing 
27 are explained. Since the processing operation of the broadcast receiving set concerning a 4th 
embodiment has many portions which lap with it of a 1st embodiment, it stops to explain only a 
different portion. 

[01 10] drawing 31 is explained with reference to the flow chart boiled and shown about reception 
operation of a common control packet. In drawing 31 , a receiving set receives a common control 
packet, and when a common control packet is passed to the common-control-information 
decoding part 117 from the filter part 1 16, it is started. 

[01 1 l]First, the common-control-information decoding part 1 17 judges whether the packet 
concerned is for channel key distribution with reference to the information identifier of the 
receive packet concerned (Step S301). If it is a common control packet for channel key 
distribution, a master key identifier will be extracted from the non-code portion of the packet 
concerned, and the master key which has the master key identifier concerned will be acquired 
from the master key storing part 105 (Step S302). The encryption section of a packet is decoded 
using the acquired master key (Step S303). The channel key obtained as a result of decoding is 
stored in the channel key storage 118, and it ends. 

[01 12] On the other hand, if the packet which received is a common control packet for master key 
creation information distribution (Step S305), A master key identifier is taken out from the packet 
concerned, and it is judged whether the master key corresponding to the master key identifier 
exists in the master key storing part 103 (Step S306). When it already exists, it ends there. When 
it does not exist, a master key new next is generated. 

[01 13]First, the master key creation information verification part 181 is the master key generation 
part 182, when the verification failure of the digital signature contained in the packet concerned 
is verified and (Step S307) carried out and a verification success is ended and carried out, A 
master key is generated according to the algorithm beforehand defined from the master key 
creation information included in the packet concerned (Step S3 08), and the generated master key 
is stored in the master key storing part 103, and it ends (Step S309). 

[01 14]Here, a little explanation of master key creation information and master key generation 
processing must be given. Master key creation information is the random number seed 
information for for example, master key generation, and the means of the random number 
generation with the algorithm and parameter of random number seed and the master key 
generation part 182 which were defined beforehand generates a master key. Since generation is 
performed in the Tampa-proof hardware, the problem of safe does not have master key creation 
information with un-enciphering. 

[01 15] Operation is the same as that of a 1st embodiment than reception of the individual control 
packet transmitted by two-way communication. 

[01 16]It is possible to apply the variation (a 2nd and 3rd embodiment) of a 1st embodiment also 
to a 4th embodiment. 

[01 17] (A 5th embodiment) A 5th embodiment explains the information distributing device (it is 
also called a contract-management center device or a contract-management device) formed in the 
center side for distributing an individual control packet common control packet to the broadcast 
receiving set concerning a 1st embodiment. 



[01 18] Drawing 32 is what showed the example of composition of the important section of the 
information distributing device concerning a 5th embodiment, and it explains hereafter the 
composition and processing operation of an information distributing device which are shown in 
drawing 32 along with the flow chart shown in drawing 35 - drawing 39, referring to drawing 32 . 
[01 19] All the members' subscriber data is stored in the subscriber database (DB) 202 in drawing 
32. As the data configuration of a subscriber data is shown in drawing 33 , it consists of member 
ID, receiving set ID, a master key identifier, a master key, channel contract information, the 
transmitted flag, a broadcast transmission flag, and a call number, and this is a subscriber data of 
one affair. 

[0120]Member ID is the management number added to each member, and in this embodiment, 
since it is easy, it is assumed that it waves from No. 1 to "MAXID" watch. Receiving set ID 
shows receiving set ID of the member who shows member ID. A master key identifier is an 
identifier of the master key which exists in the inside of the receiving set of the member 
concerned (master key storing part 103) now, and a master key is a master key corresponding to 
the master key identifier concerned. Channel contract information expresses the contract 
condition of the member concerned, as shown in drawing 2 and drawing 6 . A transmitted flag is a 
flag which shows the member concerned whether the channel contract information concerned 
was transmitted in two-way communication, and it becomes finishing at the time of "0" 
transmitting at un-transmitting and the time of "1." It is a flag which shows whether the broadcast 
transmission flag should carry out broadcast distribution of the channel contract information 
concerned of the subscriber data concerned, and it is shown at the time of "0" that it is not 
necessary to carry out broadcast distribution, and it is shown at the time of " 1 ". [ it ] [ necessary ] 
[ to carry out broadcast distribution ] 

[0121]Here, distribution of an individual control packet shall be first distributed in two-way 
communication. In that there was no response as which ******** ^ t h e error wn ich did not 
carry out normal reception have been answered also for having tried call origination repeatedly to 
the receiving set which should receive it etc., in that case, distribution of the individual control 
packet shall be changed at broadcast distribution. The number of times of the call origination 
which will be permitted by the time it changes distribution of the individual control packet to a 
broadcast receiving set from two-way communication to broadcast distribution is set to N. A call 
number presupposes that it is a telephone number of the two-way communication circuit 
connected to the receiving set of the member concerned. 

[0122]First, the processing operation at the time of transmitting the individual control packet in 
the information distributing device of drawing 32 in two-way communication is explained along 
with the flow chart shown in drawing 35 . This processing is periodically started by the individual 
control information control part 206 at every renewal of a work key. 

[0123]The individual control information preparing part 203 which received individual control 
packet creation directions from the individual control information control part 206, It is referred 
to as the variable k= 0 (Step S3301a) and i= 1 (Step S301b), and it is confirmed whether the 
subscriber data whose member ID is i exists in the member DB202 (Step S302). The processing 
at the time of not existing is described. When it does not exist, it progresses to Step S3 13 and one 
i is **************ed, and after checking that i does not exceed "MAXID", it returns to (Step 
S3 14) and Step S302, and member ID is checked by new i. 

[01 24] Since it means that general processing was completed about all the subscriber datas at Step 
S3 14 if i exceeds "MAXID", Next, it is inspected whether it progresses to Step S3 15, member 
DB202 is all searched, and an untransmitted subscriber data exists (is there any subscriber data 
whose transmitted flag is "0" or not?). If there is an untransmitted subscriber data here, one k 



(meaning of the k-th search of the subscriber data in the member DB302) will be 
************** e(i ^tep S3 16), When k exceeds N (maximum of the number of times of call 
origination) (Step S3 17), the transmitted flag of a subscriber data at the time about the member of 
"0." It gives up distributing an individual control packet by two-way communication, and a 
transmitted flag sets the broadcast transmission flag of the subscriber data of all the members of 
"0" to "1", and is completed (Step S318). If k does not exceed 1, it returns to Step S301b, and 
processing is repeated after using i= 1. In Step S3 15, if a non-transmission flag does not have a 
member record of "0", it will end. When k does not exceed N, i= 1 is used and this algorithm is 
performed from the beginning. It will end, if there is no untransmitted subscriber data. 
[01 25] At Step S302, when the subscriber data of i exists, since it is ending with transmitting if 
member ID is " 1 ", with reference to the transmitted flag in the subscriber data concerned, If i is 
not over "MAXID" after progressing to Step S313 and ************** ing 0 ne i (Step S314), it 
returns to Step S302 and returns to a member ID's existence check. Since the processing which 
performs a member ID's existence check while carrying out 1 ** increment of the i until it 
exceeds this "MAXID" is processing which appears frequently even in the bottom, since it is 
easy, it is carried out to calling it increment processing by the following explanation. 
[0126]At Step S302, when the subscriber data of member ID=i exists, since it is ending with 
transmitting if it is " 1 ", one i is ************** e d and it returns to a member ID's existence 
check with reference to the transmitted flag of the subscriber data concerned. When a transmitted 
flag is "0", the individual control information preparing part 203 acquires a required work key 
from work key DB210 based on the channel contract information of the subscriber data 
concerned (Step S304). Since it assumes that the work key is set up for every channel (a 1st 
embodiment also explained like), the processing which acquires the work key only for the 
channel only a contract of was made in this way is needed here. 

[0127]Receiving set ID of the work key with which the individual control information preparing 
part 203 was acquired, and the subscriber data concerned, Using the digital signature generation 
key which creates contract information main parts other than a digital signature from channel 
contract information, and is stored in the digital signature generation key storing part 205, this 
contract information main part. Or a digital signature is created by enciphering a contract 
information main part and the hash value as the characteristic quantity, and contract information 
as shown in drawing 5 is created. This created contract information is enciphered with the master 
key in the subscriber data concerned, a master key identifier and an information identifier are 
added, and an individual control packet as shown in drawing 7 (a) is created (Step S305). 
[0128]The created packet is passed to the transmitting and receiving controller 207 with the call 
number in the subscriber data concerned via the individual control information control part 206, 
and the transmitting and receiving controller 207 carries out call origination of the broadcast 
receiving set shown in drawing 1 of the member concerned using this call number (Step S306). 
When the receiving set concerned does not return a response to this call origination, a receiving 
error is outputted from (Step S307) and the error output part 215 (Step S308), and it progresses to 
Step S3 13, increment processing is performed, and processing is moved to the following 
subscriber data. 

[0129]In Step S307, when the response has returned from the receiving set concerned to call 
origination, the created individual control packet is transmitted with the protocol defined 
beforehand (Step S307). When fixed time has acknowledgment of receipt from a receiving set 
after transmission (Step S3 10), the individual control information control part 206, The 
transmitted flag of the subscriber data concerned is set to " 1 " (Step S3 12), and after progressing 
to Step S3 13 and performing increment processing, processing is moved to the following 



subscriber data. 

[01 30] As the portion of increment processing also described, i exceeds "MAXID", it checks that 
all the subscriber datas are ending with transmitting, or (Step S3 15) k exceeds the default N, and 
this processing ends it, when distribution by the two-way communication of an individual control 
packet is given up (Step S3 18). 

[013 l]Next, the formation part concerning the transmitting processing operation and this 
transmitting processing operation for transmitting a common control packet and an individual 
control packet by broadcast of drawing 32 is explained along with the flow chart shown in 
drawing 36 . It is started simultaneously with a broadcast start, and this processing is repeated 
without an intermission, while broadcast continues. First, the common-control-information 
preparing part 209 searches the channel key database (DB) 211, and acquires channel key data 
with the minimum channel ID (Step S401). 

[0132]Channel key data is data for every channel registered into channel key DB21 1 which 
contains a channel key at least, and is having here structure shown in drawing 34 . Channel key 
data consists of channel ID, a channel identifier, the channel key identifier (1), the channel key 
(1), a channel key identifier (2), and a channel key (2). Channel ID is a number on DB 
management wave to each channel here. The channel identifier is the same as it which was 
explained by the 1st - a 4th embodiment for information for a broadcast receiving set to identify 
each channel. A channel key identifier and a channel key are the same as what was described by 
the 1st - a 4th embodiment. 

[0133]it is because that 2 sets of pairs of a channel key and its identifier exist here needs to 
transmit now an effective channel key (channel key (1)) and the channel key (channel key (2)) 
used for the next together, and is used now depending on composition - only a channel key is not 
cared about. 

[0134]First, the creation command of a common control packet is made from the broadcast 
transmission control part 213 to the common control information control part 212. It is directed 
that the common control information control part 221 searches channel key DB21 1 to the 
common-control-information preparing part 209, and searches channel key data with the 
minimum channel key ID with this command. In response, the common-control-information 
preparing part 209 searches channel key DB21 1, and acquires channel key data (Step S401). 
[0135]The creation command of an individual control packet is made from the broadcast 
transmission control part 213 to the individual control information control part 206. With this 
command, the individual control information control part 206 searches member DB202 to the 
individual control information preparing part 203, and directs to search the subscriber data in 
which a broadcast transmission flag has the minimum member ID that is " 1 ." In response, the 
individual control information preparing part 206 searches member DB202, and acquires a 
subscriber data (Step S406). 

[0136]On the other hand, in the common-control-information preparing part 209, a channel 
identifier, a channel key identifier (1), a channel key (1), a channel key identifier (2), and a 
channel key (2) are acquired from the acquired channel key data, and a common control packet as 
shown in drawing 8 is created (Step S404). In that case, a channel identifier is used as a key, 
work key DB210 is searched, the effective work key to the channel concerned is extracted, and 
the portion as which a common control packet should be enciphered using the work key 
concerned is enciphered. The work key identifier and information identifier of the work key 
concerned are attached, a common control packet is generated, and it sends to the broadcast 
transmission section 214 via the common control information control part 212 and the broadcast 
transmission control part 213, and the packet concerned is put on a broadcast wave and sent in 



the broadcast transmission section 214 (Step S405). 

[0137]Next, in the individual control information preparing part 206, channel contract 
information is extracted from the acquired subscriber data, and a required work key is acquired 
from work key DB204 based on this (Step S407). Like the case where it distributes by two-way 
communication, contract information main parts other than a digital signature are created from 
receiving set ID in a work key and the subscriber data concerned, and channel contract 
information, and contract information is created using the digital signature generation key stored 
in the digital signature generation key storing part 205. Contract information is enciphered with 
the master key in the subscriber data concerned, a master key identifier and an information 
identifier are added, and an individual control packet is created (Step S408). Via the individual 
control information control part 206, the created packet is passed to the broadcast transmission 
control part 213, from here, puts the packet concerned on a broadcast wave, and sends it (Step 
S409). 

[0138]The above-mentioned processing operation shows the example which carries out broadcast 
transmission of a common control packet (common control packet for channel key distribution), 
and the individual control packet (individual control packet for contract information distribution) 
by turns. However, if how many this former is distributed, originally the distribution rate how 
many the latters to distribute is decided at convenience [ of a broadcasting organization ], and 
change of a rate can be realized easily. 

[0139]It returns to explanation of drawing 36 and generation of the following transmitting packet 
is started, respectively in the stage which transmission of 1 set of common control packets and an 
individual control packet ended. That is, in the common control information control part 212, the 
directions from the broadcast transmission control 213 extract the following channel key data 
from channel key DB21 1 (Step S410). The following channel key data is channel key data which 
has large channel ID in the next of channel ID of the channel key data concerning the common 
control packet which transmitted previously here. When there is no such channel key data here, 
channel key data with the minimum channel ID is extracted from channel key DB21 1 (Step 
S414). 

[0140]The minimum thing in inside [ that the broadcast transmission flag exceeded similarly 
member ID of the subscriber data whose member ID has processed / said / among the subscriber 
datas which are "1" about the subscriber data ] is extracted (Step S412). Here, if there is no such 
subscriber data, a subscriber data with the minimum member ID will be extracted (Step S402). 
[0141]The these-extracted data performs packet creation / transmitting processing which was 
mentioned above in the common-control-information preparing part 212 and the individual 
control information preparing part 203, respectively. Thus, it continues moving without an 
intermission from a broadcast start. 

[01 42] Generation of a common control packet and generation of an individual control packet can 
be performed in parallel so that clearly also from the above explanation. This is because 
generation/transmission of two kinds of packets can be controlled by the broadcast transmission 
control part 213 and it can transmit at a fixed rate. 

[0143](A 6th embodiment), next some variations are described. As the 1st variation, a power turn 
command from a center to the broadcast receiving set concerning a 2nd embodiment of 
distributing to each receiving set individually A command packet, The information distributing 
device (it is also called a contract-management center device or a contract-management device) 
formed in the center side for distributing an individual control packet and a common control 
packet is explained. This 1st variation is explained as a 6th embodiment. 
[01 44] As the 2nd variation, a call origination command is individually distributed to each 



receiving set from a center, As opposed to the broadcast receiving set concerning a 3rd 
embodiment of making a center carry out call origination from the receiving set side, The 
information distributing device (it is also called a contract-management center device or a 
contract-management device) formed in the center side for distributing a command packet, an 
individual control packet, and a common control packet is explained. This 2nd variation is later 
mentioned as a 7th embodiment. 

[01 45] Although the example of composition of the important section of the information 
distributing device concerning a 6th embodiment is the same as the case (drawing 32 ) of a 5th 
embodiment, processing operation differs. First, after distributing a power turn command packet 
in a broadcast wave, the case where individual control information is distributed by two-way 
communication is explained along with the flow chart shown in drawing 37 - drawing 38 . 
[0146]This processing is started according to a contract modification stage (every [ for example, ] 
month). If a contract modification stage comes, the individual control information control part 
206 will be a receiving set which should transmit the contract information for updating channel 
contract information etc. to the individual control information preparing part 206 first, and will 
order to still transmit a power turn command one by one to the receiving set which has not 
transmitted the contract information. The individual control information preparing part 203 
receives this, member DB202 is searched, and a transmitted flag takes out a maximum of M 
subscriber datas of "0" from what has small member ID (Step S501). Here, M is a constant 
decided by the information capacity and others of a power turn command packet. 
[0147]Next, since receiving set ID is extracted from the extracted subscriber data, respectively 
(Step S502) and a digital signature is attached to the row of the number of extracted receiving set 
ID and these receiving set ID, A digital signature generation key is extracted from the digital 
signature generation key storing part 205 (Step S504), the number of receiving set ID and these 
receiving set ID is enciphered with the key concerned, and a digital signature is generated (Step 
S505). The command main part of a data format as shown in drawing 17 from the number of 
extracted receiving set ID and these receiving set ID, a digital signature, and the command 
identifier of a power turn command is created. Thus, an information identifier is attached to the 
made command main part, and a command packet is generated (Step S506). The generated 
command packet is sent to the broadcast transmission section 214 via the individual control 
information control part 206 (Step S507), and is stored in the buffer memory in the broadcast 
transmission section 214 temporarily, and broadcast transmission is carried out with a common 
control packet in the procedure mentioned later (refer to drawing 39 ). 
[0148]Next, processing which distributes the individual control packet for it to the broadcast 
receiving set which must update channel contract information etc. is performed. Based on the 
channel contract information in the i-th subscriber data, a work key is extracted from work key 
DB210 among M (maximum) subscriber datas extracted at (Step S508) and Step S501 as i= 1 
(Step S509). An individual control packet (individual control packet for contract information 
distribution) is created still like explanation of a 5th embodiment (Step S510). Next, call 
origination is carried out using the call number in the subscriber data concerned (Step S51 1), and 
the broadcast receiving set and two-way communication of the call origination point are started. 
When the receiving set concerned to a response cannot be found here, the error of the purport of 
(Step S512) and a receiving error is returned to the individual control information control 206, In 
individual control ************ 206, this is displayed in the error output part 215 (Step S522), it 
progresses to Step S516 of drawing 38 , and processing is moved to the following subscriber data. 
[0149]At Step S512, when the response has returned from the broadcast receiving set of the call 
origination point, the created individual control packet is transmitted (Step S513). By the time it 



goes through the predetermined time defined beforehand after individual control packet 
transmission, From the receiving set concerned, when there is no acknowledgment of receipt, 
return the error of the purport of (Step S514) and a receipt error to the individual control 
information control part 206, and in the individual control information control part 206. The 
purport of a receipt error is displayed on the error output part 215, it progresses to Step S516 of 
drawing 38, and processing is moved to the following subscriber data. 
[0150]When there is acknowledgment of receipt at Step S514, it progresses to Step S515 of 
drawing 38 , and the transmitted flag of the i-th subscriber data concerned is set to " 1 ", it 
progresses to Step S516, and processing is moved to the following subscriber data. 
[0151]The following processings are required when moving processing to the following 
subscriber data. That is, it is confirmed whether (Step S516) and i exceed M as i=i+l (Step 
S517). If the i-th subscriber data exists when not exceeding (Step S518), it will return to Step 
S509 and will process to the subscriber data like the above-mentioned henceforth. When a 
subscriber data does not exist, it progresses to Step S519, member DB202 is searched with Step 
S518, and a transmitted flag extracts M (maximum) records next to "0" at it (Step S519). If one 
or more subscriber datas can be extracted here (Step S520), it will return to Step S502 and the 
power turn command over the subscriber data group will be created. At Step S520, since it means 
that round processing was completed when a subscriber data is not extracted, member DB202 to 
one checks whether all the subscriber datas of member DB202 are searched, and a transmitted 
flag has a thing of "0" (Step S521). If it is here, it returns to Step S501 and is the same as that of 
the above-mentioned henceforth. At Step S521, if the thing of "0" does not have a transmitted 
flag, since it is ending with transmitting, it will end about all the subscriber datas. 
[0152]On the other hand, at Step S517, when i exceeds M, Since the individual control packet to 
the receiving set which carried out broadcast transmission of the power turn command will finish 
transmitting, it progresses to Step S519, member DB202 is searched, and a transmitted flag 
extracts the following M (maximum) subscriber datas that are "0." If one or more subscriber 
datas can be extracted here (Step S520), it will return to the place (Step S502) which creates a 
power turn command to the subscriber data group, and will repeat. Since it means that round 
processing had ended one at Step S520 when a subscriber data is not extracted, it is checked 
whether all the subscriber datas of member DB202 are searched, and a transmitted flag has a 
thing of "0" (Step S521). If at least one subscriber data is extracted here, it will return to the 
beginning of processing of Step S501. If a subscriber data is not extracted, since one is ending 
with transmitting, it is ended about all the subscriber datas. 

[01 53] After the above carries out broadcast distribution of the power turn command, it is 
processing operation until it transmits an individual control packet in two-way communication. 
As opposed to the broadcast receiving set of composition as the individual control packet was 
shown in drawing 1 which transmits in two-way communication after this according to this 
embodiment, Since call origination for individual control packet distribution is performed from 
the center side (information distributing device of drawing 32 ) after issuing the directions which 
make one the power supply of the formation part which starts two-way communication via a 
broadcast wave beforehand and changing the********** concerned into the state waiting for 
mail arrival, To the broadcast receiving set which can receive an individual control packet, an 
individual control packet can be certainly distributed by two-way communication in two-way 
communication. 

[0154]Next, the transmitting processing operation of the transmit information of a common 
control packet is explained along with the flow chart shown in drawing 39 . It is started at the time 
of a broadcast start, and this processing is continued without an intermission henceforth till the 



end of broadcast. 

[0155]First, it directs to search the channel key data which has the minimum channel key ID from 
the common control information control part 212 to the common-control-information preparing 
part 209 (Step S601). Channel key DB21 1 is searched with the common-control-information 
preparing part 209 in response to these directions, and a channel key is acquired. A channel 
identifier, a channel key identifier (1), a channel key (1), a channel key identifier (2), and a 
channel key (2) are acquired from the acquired channel key data, and a common control packet as 
shown in drawing 8 is created (Step S602). In that case, a channel identifier is used as a key, 
work key DB210 is searched, the effective work key to the channel concerned is extracted, and 
the portion as which a common control packet should be enciphered using the work key 
concerned is enciphered. The work key identifier and information identifier of the work key 
concerned are attached, a common control packet is generated, and it sends to the broadcast 
transmission section 214 via the common control information control part 212 and the broadcast 
transmission control part 213, and the packet concerned is put on a broadcast wave and sent in 
the broadcast transmission section 214 (Step S603). 

[0156]Next, the broadcast transmission section 214 confirms whether the power turn command 
packet created by processing of Step S501 of drawing 37 - Step S507 exists in the buffer memory 
(Step S604), The time of being created among the command packets concerned, when it exists 
carries out broadcast transmission of the oldest thing from the broadcast transmission section 214 
(Step S605), and it progresses to Step S606, and on the other hand, when it does not exist, Step 
S605 is skipped and it progresses to Step S606. 

[0157]The command of the purport that the channel key data of following channel key ID is 
searched with Step S606 from channel key DB21 1 is transmitted to the common-control- 
information preparing part 209 via the common control information control part 212 from the 
broadcast transmission control part 213, Channel key DB21 1 is searched with the common- 
control-information preparing part 209, and channel key data is extracted (Step S606). When it 
succeeds in extraction, creation/transmitting processing of the common control packet for the 
channel key distribution concerned after (Step S607) and Step S602 is performed here, When 
extraction has gone wrong, it returns to the processing beginning of Step S601, and the channel 
key data which has the minimum channel key ID again is searched. 

[0158]Thus, by transmitting the common control packet for channel key distribution for 1 or two 
or more power turn command packets (if it generally says command packet), 1 or when 
distributing more than one, It cannot interfere with transmission of the common control packet 
for channel key distribution, but a command packet can be transmitted timely. 
[0159]The frequency issues of a power turn command are considered that 1 time cannot be found 
in 1 second, either from the air time of an individual control packet, etc. to the channel key 
usually (for a timely receiving start) having to transmit twice in 1 second. For this reason, the rate 
of the number of power turn command packets which it has at the time of common control packet 
distribution and which should be distributed is very low. Since being transmitted immediately is 
expectable after a power turn command packet is created from this and it is sent to the broadcast 
transmission control part 213, When carrying out call origination of the broadcast receiving set 
for individual control packet transmission, it may be thought that the power supply of the two- 
way communication circuit by the side of a receiving set is already turned on. 
[0160](A 7th embodiment) A call origination command is individually distributed to each 
receiving set from a center, As opposed to the broadcast receiving set concerning a 3rd 
embodiment of making a center carry out call origination from the receiving set side, The 
information distributing device (it is also called a contract-management center device or a 



contract-management device) formed in the center side for distributing a command packet, an 
individual control packet, and a common control packet is explained. 

[0161]The example of composition of the important section of the information distributing device 
concerning a 7th embodiment is shown in drawing 40 , and the creation processing operation of a 
command packet is explained along with the flow chart shown in drawing 41 , referring to 
drawing 40 . This processing operation is started for every month according to alteration time, 
such as channel contract information. The individual control information control part 206 will 
order to transmit a call origination command to the individual control information preparing part 
203 one by one to the receiving set of renewal of un-[ channel contract information ] first, if 
alteration time, such as channel contract information, comes. 203 receives this, member DB204 is 
searched with an individual control information preparing part, and a transmitted flag takes out a 
maximum of M subscriber datas of "0" from what has small member ID (Step S61 1). Since a 
digital signature is attached to the row of the number of extracted receiving set ID and these 
receiving set ID, A digital signature generation key is extracted from the digital signature 
generation key storing part 205 (Step S612), the number of receiving set ID and these receiving 
set ID or the hash value as these data rows and its characteristic quantity is enciphered with the 
key concerned, and a digital signature is generated (Step S613). The command main part of a 
data format as shown in drawing 17 from the number of extracted receiving set ID and these 
receiving set ID, a digital signature, and the command identifier of a call origination command is 
created. Thus, an information identifier is attached to the made command main part, and a call 
origination command packet is generated (Step S614). 

[0 1 62]The generated call origination command packet is sent to the individual broadcast 
transmission control part 213 via the individual control information control part 206 (Step S615), 
and as shown below, broadcast transmission is carried out with other common control packets. 
[0163]The transmitting processing operation of the individual control packet by two-way 
communication is explained according to the flow chart shown in drawing 42 - drawing 43, 
referring to drawing 40 . This processing is started by the call origination from a broadcast 
receiving set (Step S701). In the center, call origination is received from a receiving set by the 
transmitting and receiving controller 207 via the modem 208 (Step S702), and a creation 
command of the challenge which asks receiving set ID is sent to the challenge preparing part 252 
in the transmitting and receiving controller 207. In the challenge preparing part 252, the 
challenge packet of composition of having been shown in drawing 23 which asks receiving set ID 
in response is created. The challenge database (DB) 251 is a database with which the challenge 
number of various challenges and the group of processing were indicated here. The challenge 
preparing part 252 uses as a key the challenge number which asks challenge DB251 to receiving 
set ID, and extracts the contents of processing. The created challenge packet is transmitted to a 
receiving set via the modem 208 from the transmission and reception section 207 (Step S703). 
When a response packet is not transmitted from the receiving set concerned into the 
predetermined time beforehand defined after transmission (Step S704), the individual control 
information control part 206, The error output of the purport of challenge failure that receiving 
set ID is asked is outputted from the error output part 215, and the processing to the receiving set 
concerned is ended (Step S717). 

[01 64] When the response packet has been transmitted into predetermined time at Step S704, the 
response packet is sent to the response verification part 253 from the transmitting and receiving 
controller 207. In the response verification part 253, after conducting the format check of the 
response packet concerned, receiving set ID taken out from the packet is outputted to the 
transmitting and receiving controller 207 (Step S705). the transmitting and receiving controller 



207 extracts the subscriber data of the receiving set ID concerned from member DB202 for this 
receiving set ID to the individual control information control part 206 to a key -- a purport 
command is carried out. Here, since the receiving set ID concerned does not exist without an 
applicable subscriber data (Step S705), an error output etc. are performed and processing is ended 
(Step S722). If a subscriber data is acquired (Step S706), the subscriber data concerned will be 
sent to the transmitting and receiving controller 207, and the transmitting and receiving controller 
207 will send it to the response inspection section 253. 

[0165]Then, like the case of the challenge creation as which the transmitting and receiving 
controller 207 inquires receiving set ID to the challenge preparing part 252, It points to the 
challenge creation which asks a master key identifier, the challenge packet created as a result is 
transmitted (Step S707), and the response packet sent in predetermined time is inspected (Step 
S708, Step S709). When the master key identifier is not in agreement with it of the subscriber 
data concerned, the error output of the purport of master key identifier disagreement is performed 
(Step S719), and when in agreement, it shifts to processing of receiving set attestation in which it 
explains below. 

[01 66] Receiving set authenticating processing is processing which generates one or more 
challenges made to answer using the information known only with a just receiving set, and attests 
by the response. First, by the transmitting and receiving controller 207, it is set as j= 1 (Step 
S710), and it is requested that an attestation challenge should be published to the challenge 
preparing part 252. In the challenge preparing part 252 which received the request, a challenge is 
extracted from challenge DB251 at random, a challenge packet as shown in drawing 23 is created 
(Step S71 1), and it is transmitted to a broadcast receiving set via the modem 208 from the 
transmitting and receiving controller 207 (Step S712). When a response packet is not sent from a 
receiving set within after-transmission fixed time (Step S713), the error output of the purport of 
attestation challenge failure is performed, and it ends (Step S720). When the response packet has 
been sent, the response packet is sent to the response verification part 253 from the transmitting 
and receiving controller 207, and conducts an attestation inspection by the authentication 
algorithm provided in challenge DB251 in the response verification part 253 (Step S714). Since it 
was shown that it is a right response when an attestation inspection was successful, it is 
confirmed whether ************** 0 nej ( Step §715) ^ j exceeds N (Step S716). N is the 
constant for which it depended on the system beforehand, and means the trial frequency of an 
attestation challenge. When j does not exceed N, the receiving set authenticating processing of 
Step S71 1 - Step S714 is repeated until j exceeds N. When an attestation inspection fails in Step 
S714, since it is the wrong response, the error output of the purport of an authentication failure is 
performed and it ends (Step S721). 

[0167]When j exceeds N at Step S716, it will mean that attestation was completed and it is able 
to be checked that the receiving set which is performing the present communication by the 
information distributing device (center) side is just. Then, it progresses to Step S722 of drawing 
43, and the signal of the end of attestation is sent to the individual control information control 
part 206 from the transmitting and receiving controller 207, and the individual control 
information control part 206 is requested from the individual control information preparing part 
203 so that the individual control packet of the subscriber data concerned may be created. In 
response in the individual control information preparing part 203, a required work key is acquired 
from work key DB210 based on the channel contract information in the subscriber data 
concerned (Step S722). Here, since it assumes that the work key is set up for every channel, the 
processing which acquires the work key only for the channel which is specified in channel 
contract information, and only a contract of is made is needed. 



[0168]Next, contract information main parts other than a digital signature are created from the 
pair of the work key and work key identifier which were acquired and receiving set ID of the 
subscriber data concerned, and channel contract information, and contract information is created 
using a digital signature generation key. Contract information is enciphered with the master key 
of the subscriber data concerned, a master key identifier and an information identifier are added, 
and an individual control packet as shown in drawing 22 is created (Step S723). The created 
packet is sent to the transmitting and receiving controller 207 via the individual control 
information control part 206, and is transmitted to a receiving set. After the transmission 
concerned, when fixed time has acknowledgment of receipt from a receiving set, the transmitted 
flag of the subscriber data concerned (Step S724) is set to "1", and it ends (Step S725). When 
there is no acknowledgment of receipt, the error output of the purport of receipt failure of an 
individual control packet is performed, and it ends (Step S726). 

[01 69] According to a 7th embodiment of the above, so that the call origination from the receiving 
set side may not concentrate on one time, Even if the stage of the call origination from the 
receiving set side can be adjusted from the center side and also it is the call origination from the 
receiving set side, after attesting the justification of a receiving set, Since the individual control 
packet for updating the channel contract information etc. which are stored in the receiving set can 
be transmitted, injustice which becomes other receiving sets, and clears up and carries out call 
origination to them can be prevented. 

[01 70] Since the 1st variation is premised on receiving set call origination for the 2nd variation on 
the assumption that center call origination so that clearly also from the above explanation, it is 
also possible to perform this simultaneously. That is, it constitutes so that an individual control 
packet may be transmitted by a broadcast wave, when not transmitting and carrying out center 
call origination of the power turn command packet about the receiving set which does not carry 
out call origination at all or still not receiving, even if it transmits a call origination command 
packet. If it does in this way, the transmitter meeting of an individual control packet will increase 
more, and a trouble by which renewal of a contract is not carried out to that unjust viewing and 
listening can be prevented and having contracted will also decrease. 
[01 71] Although based on transmission of the individual control packet by the two-way 
communication by center call origination, combining these and a 5th embodiment, Change into 
the state (power turn state) in which receipt is possible the two-way communication function part 
which carries out broadcast distribution of the power turn command packet, and a receiving set 
has compulsorily about the receiving set which does not answer, or, Broadcast transmission of 
the call origination command packet is carried out, call origination is carried out from the 
receiving set side, and the conditional access system which can distribute the individual control 
packet for renewal of the channel contract information etc. which are memorized by the receiving 
set by two or more methods can be built. Especially the thing for which it has more transmitting 
means of an individual control packet about the receiving set which can carry mobile 
environment (since a receiving set is not in the always same state) is advantageous. 
[0172](An 8th embodiment) An 8th embodiment explains the information distributing device (it 
is also called a contract-management center device or a contract-management device) formed in 
the center side for distributing individual control information and common control information to 
the broadcast receiving set explained by a 4th embodiment. 

[01 73] An 8th embodiment is stopped to explain only a portion which is different since there are 
many portions which overlap with the 5th - the 7th embodiment and information distributing 
device on composition and processing operation. That is, even if an individual control packet has 
some difference in a data configuration, the handling is the same, therefore the formation part and 



processing operation for distributing an individual control packet in two-way communication are 
the same as that of the case of the 5th - a 7th embodiment. So, below, an individual control 
packet common control packet is extracted and explained to the formation part which carries out 
broadcast distribution, and its processing operation. 

[0174]Being transmitted from the broadcast transmission section 214 in the 5th - a 7th 
embodiment, To having been a common control packet for channel key distribution, and an 
individual control packet for distribution of channel contract information etc., the common 
control packet for channel key distribution at an 8th embodiment, Three, the common control 
packet for master key creation information distribution and the individual control packet for 
channel contract information distribution, are assumed. Follow. In an 8th embodiment, broadcast 
transmission of the three above-mentioned kinds of packets must be carried out. This point is an 
intrinsically different point from the 5th - a 7th embodiment. 

[0175]The example of composition of the important section of the information distributing device 
concerning an 8th embodiment is shown in drawing 44 , and the processing operation at the time 
of carrying out broadcast transmission of the three above-mentioned kinds of packets is shown in 
drawing 45 - drawing 46 . Hereafter, it explains along with the flow chart shown in drawing 45 - 
drawing 46 , referring to drawing 44 . 

[0176]It is started simultaneously with a broadcast start, and this processing is repeated without 
an intermission, while broadcast continues. First, the common-control-information preparing part 
209 searches channel key DB21 1, and acquires channel key data with the minimum channel ID. 
Channel key data is having here structure shown in drawing 34 by the data for every channel 
registered into channel key DB21 1 which contains a channel key at least. Channel key data 
consists of channel ID, a channel identifier, the channel key identifier (1), the channel key (1), a 
channel key identifier (2), and a channel key (2). Channel ID is a number on the database 
management wave to each channel here. The channel identifier is the same as that of the 
explanation of an embodiment mentioned above for information for a receiving set to identify 
each channel. It is the same as that of explanation of the embodiment which also mentioned 
above the channel key identifier and the channel key. Only the channel key which is because that 
2 sets of pairs of a channel key and its identifier exist here needs to transmit now an effective 
channel key and the channel key used for the next together, and is used now depending on 
composition. 

[0177]First, the creation command of the common control packet for channel key distribution is 
made from the broadcast transmission control 213 to the common control information control 
part 212. It is directed that the common control information control part 212 searches channel key 
DB21 1 to the common-control-information preparing part 209, and searches channel key data 
with the minimum channel ID with this command. In response, the common-control-information 
preparing part 209 searches channel key DB21 1, and acquires channel key data (Step S801). 
[0178]The broadcast transmission control part 213 gives the creation command of an individual 
control packet to the individual control information control part 206. the subscriber data in which 
the individual control information control part 206 searches member DB202 to the individual 
control information preparing part 203 with this command, and a broadcast transmission flag has 
the minimum member ID that is "1" ~ search ~ it directs like. In response, the individual control 
information preparing part 203 searches member DB202, and acquires a subscriber data (Step 
S802). 

[0179]From the channel key data acquired in the common-control-information preparing part 209 
to next, a channel identifier. A channel key identifier (1), a channel key (1), a channel key 
identifier (2), and a channel key (2) are acquired (Step S803), and creation of the common control 



packet for channel key distribution as shown in drawing 30 (b) is started. That is, an effective 
master key is extracted from the master key storing part 261 , and the data row which consists of a 
channel identifier, a channel key identifier (1), a channel key (1), a channel key identifier (2), and 
a channel key (2) is enciphered using the master key concerned. The master key identifier and 
information identifier of the master key concerned are attached, and the common control packet 
for channel key distribution is generated (Step S804). This common control packet is sent to the 
broadcast transmission section 214 via the common control information control part 212 and the 
broadcast transmission control part 213, and is carried and sent to a broadcast wave from here 
(Step S805). 

[0180]Next, in the individual control information preparing part 203, receiving set ID and 
channel contract information are acquired from the acquired subscriber data (Step S806), and 
contract information other than a digital signature is created from them. Using the digital 
signature generation key stored in the digital signature generation key storing part 205, the data 
row from receiving set ID to channel contract information, Or this data row and the hash value as 
that characteristic quantity are enciphered, a digital signature is created, it is given to the last of 
the data row from receiving set ID to channel contract information, and contract information as 
shown in drawing 29 is created. Contract information is enciphered with the master key picked 
out from the subscriber data concerned, a master key identifier, receiving set ID, and an 
information identifier are added, and an individual control packet as shown in drawing 7 (b) is 
created (Step S807, Step S808). 

[0181]The created packet is sent to the broadcast transmission section 214 via the individual 
control information control part 206 and the broadcast transmission control part 213, and is 
carried and sent to a broadcast wave from here (Step S809). 

[0182]Next, the common-control-information preparing part 209 creates the common control 
packet for master key creation information distribution. First, the identifier (master key identifier) 
of master key creation information and the master key generated from it is acquired from the 
master key creation information storage 264, Then, the digital signature to master key creation 
information is created by acquiring a digital signature generation key from the digital signature 
generation key storing part 205, and enciphering master key creation information or master key 
creation information, and the hash value as the characteristic quantity, A digital signature and an 
information identifier are added and the common control packet for master key creation 
information distribution of composition of being shown in drawing 30 (a) is created (Step S810 - 
Step S8 11). 

[01 83]This created packet is sent to the broadcast transmission section 214 via the common 
control information control part 212 and the broadcast transmission control part 213, and is 
carried and sent to a broadcast wave from here (Step S812). 

[0184]The above explanation shows the example which carries out broadcast transmission of the 
common control packet for channel key distribution, the individual control packet for contract 
information distribution, and the common control packet for master key creation information 
distribution one by one. However, originally the rate of ******** of the packet which will 
transmit the following packet if which transmits which packet is decided at convenience [ of a 
broadcasting organization ], and change of a rate is easy. 

[0185]It is the stage which 1 set of transmission of the common control packet for channel key 
distribution, the individual control packet for contract information distribution, and the common 
control packet for master key creation information distribution ended, and shifts to generation of 
the packet which should transmit to the next. That is, the common-control-information preparing 
part 209 searches the following channel key data from channel key DB21 1 (Step S813). Channel 



ID is the minimum thing here among channel key data with channel ID with the following larger 
channel key data than channel ID of the channel key data concerning the packet which 
transmitted previously. When there is no such channel key data here, channel key data with (Step 
S814) and the minimum channel ID is extracted from channel key DB21 1 (Step S817). 
[0186]The minimum thing is extracted also about a subscriber data among what has a similarly 
larger broadcast transmission flag than the value of member ID of the subscriber data whose 
member ID has processed [ said ] among the subscriber datas which are "1" (Step S815). Here, if 
there is no such subscriber data (Step S816), a subscriber data with the minimum member ID will 
be extracted (Step S802). 

[0 1 87]Thus, based on the channel key data and the subscriber data which were extracted, 
Creation/transmitting processing of the above-mentioned explanation, therefore the common 
control packet for channel key distribution and the individual control packet for contract 
information distribution is performed, and creation/transmitting processing of the common 
control packet of a master key creation information distribution important point is performed 
after that. Moving the above processing is continued without an intermission from a broadcast 
start. 

[0188]Generation of the common control packet for channel key distribution, the individual 
control packet for contract information distribution, and the common control packet for master 
key creation information distribution can be performed in parallel. What is necessary is to 
perform generation/transmission control how much to create three kinds of packets every how 
much, respectively, and to transmit every, by the broadcast transmission control part 213, and just 
to generate/transmit at a fixed rate, when mounted such. 

[0189]The 5th - a 7th embodiment can also be used combining an 8th embodiment so that it may 
understand easily. 

[0190](Postscript) In broadcast with in addition few channel numbers, the limited reception 
according [ without using channel contract information ] only to a work key is also possible. 
Since a work key is a key set up for every channel, it can actually perform viewing-and-listening 
limitation only to a contractor by updating this work key during every contract term (for example, 
one month), and transmitting the updated work key only to the televiewer who is viewing and 
listening to the channel concerned during the contract term concerned as individual control 
information. 

[0191]In such composition, when the channel key of the channel concerned has been transmitted 
by the common control packet, the receiving set side uses as a key the work key identifier 
indicated to the header part of the common control packet, and confirms whether the work key of 
the channel concerned exists in a work key storage. When it exists, the encryption section of the 
control packet concerned is decoded, and the channel key of the channel concerned is acquired. 
When it does not exist, the processing to the common control packet concerned is ended. Since 
only the viewing-and-listening contractor of the channel with the work key of the channel 
concerned concerned can acquire the channel key concerned from this, limited reception is 
realizable. 

[0192]Thus, the conditional access system can only comprise updating the work key of each 
channel for every contract term. However, as the present CS broadcasting, when there are many 
channel numbers, since the update information of a work key will become large-scale if a work 
key is changed for every contract term, it is not so realistic. So, the method which uses together 
channel contract information which was explained by the above 1st - an 8th embodiment in the 
present CS broadcasting is desirable. However, for example, in broadcast only with one channel 
(or there is only one contract form), since one is enough as a work key, the conditional access 



system only by the above work keys also has a merit. 

[0193]The channel contract information and the work key which are memorized with a receiving 
set may be updated simultaneous at one individual control packet, and it may be made to update 
only either in a 1st embodiment and the embodiment relevant to it. 

[0194]In the 1st - an 8th embodiment, when creating a digital signature, the information part 
which is an object of a digital signature, and the hash value as the characteristic quantity may be 
enciphered, and a digital signature may be created. That is, for example, as long as it is a digital 
signature in the contract information of drawing 5, portions and hash values other than a digital 
signature may be enciphered, and the digital signature of contract information may be created. 
[0195]this invention is not limited to the above 1st - an 8th embodiment, and in the range which 
does not deviate from the gist, many things are boiled and it can be changed at an execution 
phase The invention of various stages is included in the above-mentioned embodiment, and 
various inventions may be extracted by the proper combination in two or more composition 
business indicated. For example, even if some constituent features are deleted from all the 
constituent features shown in an embodiment, The technical problem (at least one) described in 
the column of Object of the Invention is solvable, and when the effect (at least one) described in 
the column of the effect of the invention is acquired, the composition from which these 
constituent features were deleted may be extracted as an invention. 
[0196] 

[Effect of the Invention] As explained above, according to this invention, offer of the paid 
broadcasting service with high safety which can prevent still more unjust viewing and listening is 
enabled, without pressing broadcast bands by distributing a lot of individual control information, 
even if members increase in number. 



